CyberEssentials

Essential learning guide in CyberSec.

A1 Concepts:

• How Web Works

• CIA-Concepts

• Natting-Encoding

• Application Programming Interface API-101

• Active-Dir

• GET v POST

• HTTP Request & Response

• Site v Origin & Cookies

• All About Session

• XML Lang Info

---

---

Topics-Covered:

• Security Framework

• Network Security Concepts

• 3-way-handsharking_Ports_Network-Devices_URL_Web-Browser Go

• SANS Top 20 Controls

• Network Models

• IP-Related, Subnetting

• Linux Related Concepts

• Protocols Related

• OWASP WebApp-Vuln ZeroDay

• CEH-Examp-Prep

• Client Side vs Server Side Vulnerability

• Thick Client Vuln

• API Security Testing

---

---

Security Tools

• Burp-Suite
• Metasploit
• Nessus
• NMAP
• Qualys Scanning Tool

---

---

Online PenTesting PortSwigger Acedemy

• Portswigger-Labs

Client Side Vuln: ONLY Cross Site Scripting(XSS) | Cross Site Request Forgery | Cross Origin Resource Sharing(CORS) | Clickjacking | DOM Based Vuln | Web Socket

Cheatsheet:

1. CyberSec Tools - Resources

Imp Links to refer:

1. OSCP — The Official Guide
2. C|EH in Bullets

---

---

Youtube Resource:

• TCM Acad

NetworkChuck:

NahamSec

Null Byte

The Cyber Expert (Hindi)

HackerSploit