MD.KHALID BIN WALID HASAN SIKTO

Penetration Testing Red Teaming Ethical Hacking Vulnerability Assessment Adversary Simulation Purple Teaming Phishing (Spear) Credential Harvesting Password Cracking Brute Force Attacks Web Application Security OWASP Top 10 SQL Injection Cross-Site Scripting (XSS) CSRF SSRF Command Injection File Inclusion (LFI/RFI) XML External Entities (XXE) IDOR Broken Access Control API Security Testing JWT Attacks CMS Exploitation (WordPress, Joomla) Metasploit Framework Burp Suite Nmap Wireshark Hashcat SQLMap Aircrack-ng Snort Nessus John the Ripper Hydra Gobuster Dirsearch Nikto Netcat Socat BloodHound SharpHound Mimikatz Cobalt Strike (emulation) PowerShell Empire (emulation) Python Scripting Bash Scripting PowerShell Reverse Engineering (basic) Malware Analysis (static) Active Directory Attacks Kerberoasting Pass-the-Hash Pass-the-Ticket Golden Ticket Attack Silver Ticket Attack DCSync Attack Lateral Movement Pivoting SSH Tunneling DNS Tunneling HTTP/S Tunneling Port Scanning Service Fingerprinting Subdomain Enumeration Directory Bruteforcing Wireless Security Testing WPA2 Cracking Deauthentication Attacks AWS Security Azure Security Cloud Misconfiguration Testing S3 Bucket Enumeration IAM Privilege Escalation Docker Security Container Escape (conceptual) CI/CD Pipeline Security GitHub Security Secrets Detection Threat Intelligence IoC Analysis TTP Mapping SOC Operations SIEM (Wazuh, ELK) Sysmon Log Analysis Windows Event Log Analysis EDR Concepts Threat Hunting Incident Response (DFIR basics) Digital Forensics (basic) Memory Forensics (Volatility basics) Report Writing CVSS Scoring Remediation Guidance Buffer Overflow (conceptual)