I had been looking forward to 'Intermediate NTA' on htb-academy, and it didn't disappoint.
It covers a wide variety of attack vectors, including: ARP scanning, spoofing, and DOS; 802.11 Deauth, Fragmentation abuse, IP spoofing, all kinds of DNS and TCP attacks, ICMP tunneling, XSS, and Telnet and UDP-based methods for communication and data exfiltration.
Critically, it teaches what these attacks (and others) are, how to discover them and dig deeper into network traffic. While many of these attacks are familiar to me (from the offensive side), seeing how they look in Wireshark has been a real eye-opener. It's crazy how much traffic many common tools may generate (such as nmap), and how easy that traffic is to spot once it is identified.
One of the gems of this module are the 'resources', in the form of 36 pcap files demonstrating all of these different attacks and how they actually look. 36! This is a treasure trove of NTA data that will be extremely useful to me.
Helping enterprises propel their application security programs by reducing the noise of traditional toolsets #appseclumberjack #owaspmaine
2moLove it 🔒Tony Trummer 🔒 hope you are well my friend!