This is an introduction to a free, hands-on ethical hacking course led by cybersecurity instructor Declan Middleton. Designed for developers and aspiring security analysts, it explains how common penetration-testing methods can reveal weaknesses in systems, with the aim of helping learners build stronger defenses. The exercises take place in an isolated lab using a Capture The Flag virtual machine, so participants can practice the techniques legally and safely rather than targeting real systems.
The roughly 2.5-hour course progresses from Linux command-line basics in Parrot OS - including navigation, permissions, user management, and processes - to network reconnaissance with Nmap. Learners identify hosts, open ports, services, and software versions, then search for hidden web paths using Dirsearch, FFuF, WhatWeb, and Nikto. The course also demonstrates using Burp Suite to intercept and alter HTTP requests, examine authentication flows, and test file-upload weaknesses involving webshells. In its final section, it introduces Bash and Python scripts for automating reconnaissance tasks such as socket connections, banner grabbing, and HTTP-header parsing. The material is practical and tool-focused, giving beginners a guided tour of a penetration-testing workflow rather than presenting research findings or a detailed security framework.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A Postman user says an update began routing POST requests through Postman’s servers before forwarding them to the intended destination. They warn against using the client for sensitive requests without clear consent to this proxying. (news.ycombinator.com)
NSW Health is investigating a breach of an isolated server after a hacker claimed to steal about 100,000 documents. Officials say no patient data or clinical services are affected, while police verify the claims. (smh.com.au)
The Capytistas, an activist group, plans to publish home addresses and dossiers about Elon Musk, Tesla leaders, and hundreds of billionaire-linked people. The group says the campaign will expose how extreme wealth shapes political power, while raising safety and privacy concerns. (wired.com)
A cyberattack reprogrammed equipment at a French blood-storage facility to heat samples to 110°C instead of keeping them at -30°C. Staff caught the tampering in time, and France’s health ministry reported no operational impact or damaged blood. (twitter.com)
Kairos is an open-source platform for real-time event intelligence and fraud and risk decisioning. It focuses on analyzing financial behavior to support risk decisions. (github.com)
The DOJ warned that a data breach involving the FBI likely also affected Justice Department employees. The warning indicates the breach may extend beyond the FBI. (politico.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.