John Hammond Courses

Mass Digital Forensics & Incident Response with Velociraptor

4 ratings

Explore digital forensics and incident response using Velociraptor. Learn about VFS, artifacts, automation, process tracking, and hunting for compromised machines with practical demonstrations and expert insights.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Hacking APIs

2 ratings

An introductory look at hacking APIs, why API testing matters, and how to begin learning API security.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Hacking with Nuclei - Uncovering .git Secrets

1 rating

Discover how to use Nuclei for uncovering exposed .git repositories and extracting sensitive information from web applications in this cybersecurity demonstration.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Learn Open-Source Intelligence (OSINT)

1 rating

Master the art of gathering and analyzing open-source intelligence through practical techniques and methodologies for effective information collection and investigation.

• YouTube
• 1 hour 14 minutes
• Self-Paced
• Free Video

Hands-On Ransomware: Exploring Cybercrime

1 rating

A malware analyst demonstrates configuring, building, and detonating RAASNet, Yashma, and Lockbit ransomware.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

CVE-2021-44228 - Log4j - Minecraft Vulnerable and So Much More

A hands-on demonstration of Log4Shell remote code execution through vulnerable Log4j applications and Minecraft servers, with detection and defense.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

OSED Review - Offensive Security Exploit Developer

A practitioner’s review of OSED, covering Windows user-mode exploit development, exam preparation, shellcoding, ROP chains, reverse engineering, and bypassing DEP and ASLR.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Using Snyk to Find & Fix Vulnerabilities

Use Snyk to scan, exploit, and patch vulnerabilities in vulnerable web applications and Hack The Box CTF challenges.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Offensive Security Experienced Penetration Tester Review

A firsthand review of OSEP and PEN-300, covering advanced evasion, exam preparation, structured notes, reporting, and lessons from the certification experience.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Classifying Malware with YARA

Learn to classify malware using YARA rules, from setup to integration. Explore writing techniques, resources, and practical applications for effective malware analysis and detection.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

How to Pivot Through a Network with Chisel

Learn to pivot through networks using Chisel, covering setup, reconnaissance, static binaries, reverse connections, SOCKS proxies, and forward shells for effective network penetration.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Custom Java Deserialization Exploit - Serial Snyker

Exploit a custom Java deserialization vulnerability to achieve remote code execution and a reverse shell in a capture-the-flag challenge.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Filter Evasion in a Reverse Shell

A capture-the-flag walkthrough of escaping a no-space character filter to obtain a reverse shell, escalate privileges, and read the root flag.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Calculating Smart Contract Vulnerability Impact - Low to Critical

Explore a new framework for assessing smart contract vulnerabilities, learn to calculate risk and impact, and discover how to prioritize security weaknesses in blockchain systems.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Fake CAPTCHA Malware Analysis

Explore the deceptive tactics of malware disguised as CAPTCHA, uncovering its distribution methods and analyzing its impact on cybersecurity.

• YouTube
• 23 minutes
• Self-Paced
• Free Video