Pinned Tweet
Coming soon... the annual TCM Security Black Friday - Cyber Monday sale. Discounts on everything.
Been looking for a chance to sign up for a certification or join the Academy? Here's your sign - keep an eye on our socials as more info will be coming very soon.
Been looking for a chance to sign up for a certification or join the Academy? Here's your sign - keep an eye on our socials as more info will be coming very soon.
2
5
15
3,108
This week in our #Discord server, Joshua Speshock returns to give his talk on Windows Log Analysis! 💻
Last time we could only let a limited number of people into Joshua's talk. Well, we learned our lesson! So this time we're hosting this event in our Discord stage.
We'll be 1 PM ET Thursday (November 12th). You can join the server here: hubs.la/Q04DwD2v0
Want to give a Discord workshop or talk yourself in early 2027? Submit your idea here (and get swag if you're picked!) hubs.la/Q04DwD950
Last time we could only let a limited number of people into Joshua's talk. Well, we learned our lesson! So this time we're hosting this event in our Discord stage.
We'll be 1 PM ET Thursday (November 12th). You can join the server here: hubs.la/Q04DwD2v0
Want to give a Discord workshop or talk yourself in early 2027? Submit your idea here (and get swag if you're picked!) hubs.la/Q04DwD950
1
2
12
2,386
We recently did a series of OSINT challenges for Halloween, and we had a considerable amount of community participation on solving them!
If you missed our Halloween-themed challenges, we compiled a few evergreen #OSINT challenge resources so you can still work on fine-tuning igence skills. These include 𝗢𝗦𝗜𝗡𝗧𝟰𝗙𝘂𝗻, 𝗕𝗲𝗹𝗹𝗶𝗻𝗴𝗰𝗮𝘁, 𝗚𝗿𝗮𝗹𝗵𝗶𝘅, and 𝗼𝘂𝗿 𝘃𝗲𝗿𝘆 𝗼𝘄𝗻 𝘀𝗼𝗰𝗶𝗮𝗹𝘀 every so often.
We have a course and certification that are well worth your time, if you've found that OSINT's your thing. 😉 hubs.la/Q04DCRcc0
If you missed our Halloween-themed challenges, we compiled a few evergreen #OSINT challenge resources so you can still work on fine-tuning igence skills. These include 𝗢𝗦𝗜𝗡𝗧𝟰𝗙𝘂𝗻, 𝗕𝗲𝗹𝗹𝗶𝗻𝗴𝗰𝗮𝘁, 𝗚𝗿𝗮𝗹𝗵𝗶𝘅, and 𝗼𝘂𝗿 𝘃𝗲𝗿𝘆 𝗼𝘄𝗻 𝘀𝗼𝗰𝗶𝗮𝗹𝘀 every so often.
We have a course and certification that are well worth your time, if you've found that OSINT's your thing. 😉 hubs.la/Q04DCRcc0
1
4
15
2,971
Whether you’re an experienced penetration tester, a bug bounty hunter, or just starting out down your ethical hacking path, mobile security opens up a lot of exciting opportunities. Here's a quick roadmap to starting out in mobile security:
𝗦𝘁𝗮𝗿𝘁 𝘄𝗶𝘁𝗵 𝘁𝗵𝗲 th the OWASP Mobile Top 10, which is really the go-to resource for understanding vulnerabilities in both iOS and Android apps.
𝗚𝗲𝘁 𝗛𝗮𝗻𝗱𝘀-𝗢𝗻: TryHackMe’s Mobile Malware Analysis room offers a fantastic interactive experience to sharpen your skills in analyzing Android malware.
𝗠𝗮𝘀𝘁𝗲𝗿 𝗶𝗢𝗦 𝗝𝗮𝗶𝗹𝗯𝗿𝗲𝗮𝗸𝗶𝗻𝗴: Dive into the #iOS Jailbreak Guide for detailed insights into iOS exploitation. 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹 reading for anyone serious about mobile security. hubs.la/Q04DtQL-0
Want to take your skills to the next level? Consider the Practical Mobile Pentest Associate (PMPA) certification. This hands-on training is designed to help you master mobile app penetration testing and build real-world skills.
🔗 hubs.la/Q04DtQL_0
𝗦𝘁𝗮𝗿𝘁 𝘄𝗶𝘁𝗵 𝘁𝗵𝗲 th the OWASP Mobile Top 10, which is really the go-to resource for understanding vulnerabilities in both iOS and Android apps.
𝗚𝗲𝘁 𝗛𝗮𝗻𝗱𝘀-𝗢𝗻: TryHackMe’s Mobile Malware Analysis room offers a fantastic interactive experience to sharpen your skills in analyzing Android malware.
𝗠𝗮𝘀𝘁𝗲𝗿 𝗶𝗢𝗦 𝗝𝗮𝗶𝗹𝗯𝗿𝗲𝗮𝗸𝗶𝗻𝗴: Dive into the #iOS Jailbreak Guide for detailed insights into iOS exploitation. 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹 reading for anyone serious about mobile security. hubs.la/Q04DtQL-0
Want to take your skills to the next level? Consider the Practical Mobile Pentest Associate (PMPA) certification. This hands-on training is designed to help you master mobile app penetration testing and build real-world skills.
🔗 hubs.la/Q04DtQL_0
3
3
18
3,115
TCM Security retweeted
Coming soon... the annual TCM Security Black Friday - Cyber Monday sale. Discounts on everything.
Been looking for a chance to sign up for a certification or join the Academy? Here's your sign - keep an eye on our socials as more info will be coming very soon.
Been looking for a chance to sign up for a certification or join the Academy? Here's your sign - keep an eye on our socials as more info will be coming very soon.
2
5
15
3,108
TCM Security retweeted
What actually happens when you delete something from the internet?
The largest copy has been running continuously since the 1990s, and its owners never controlled it.
▶ Full video: youtube.com/watch?v=Z46D96… — via The Cyber Mentors
The largest copy has been running continuously since the 1990s, and its owners never controlled it.
▶ Full video: youtube.com/watch?v=Z46D96… — via The Cyber Mentors
1
2
33
1,355
If you want to partner with the TCM Security #pentesting team, book a Q4 pentest and get 3 certification vouchers for 𝘺𝘰𝘶𝘳 team as a thank you! Get in touch with us here: hubs.la/Q04DvNdc0
A penetration testing report is the key deliverable from an ethical hacker or did you know these reports can vary greatly in format and detail?
Some firms may provide just raw scan results, while others offer comprehensive reports that can exceed 100 pages, which can detail everything from vulnerabilities to remediation advice.
The right level of detail depends on your needs and the goals of the test. At TCM Security, we provide clear, actionable penetration testing reports to help organizations strengthen their security posture.
💡 Want to see an example? Download a sample penetration testing report (attached) from us today and get a closer look at how thorough, impactful, and valuable a detailed report can be.
A penetration testing report is the key deliverable from an ethical hacker or did you know these reports can vary greatly in format and detail?
Some firms may provide just raw scan results, while others offer comprehensive reports that can exceed 100 pages, which can detail everything from vulnerabilities to remediation advice.
The right level of detail depends on your needs and the goals of the test. At TCM Security, we provide clear, actionable penetration testing reports to help organizations strengthen their security posture.
💡 Want to see an example? Download a sample penetration testing report (attached) from us today and get a closer look at how thorough, impactful, and valuable a detailed report can be.
0
2
9
2,720
What are 3 questions you should prepare to answer for your next #pentesting job interview? Here are some possible scenarios (take some notes!)
1️⃣ 𝗗𝗲𝘀𝗰𝗿𝗶𝗯𝗲 𝗮 𝗰𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗶𝗻𝗴 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝘀𝘀𝘂𝗲 𝗮𝗻𝗱 𝗵𝗼𝘄 𝘆𝗼𝘂 𝗵𝗮𝗻𝗱𝗹𝗲𝗱 𝗶𝘁 - use this as a problem-solving skills and your ability to handle difficult situations
2️⃣ 𝗧𝗮𝗹𝗸 𝗺𝗲 𝘁𝗵𝗿𝗼𝘂𝗴𝗵 𝘁𝗵𝗲 𝘀𝘁𝗮𝗴𝗲𝘀 𝗼𝗳 𝗮 𝘁𝘆𝗽𝗶𝗰𝗮𝗹 𝗽𝗲𝗻𝗲𝘁𝗿𝗮𝘁𝗶𝗼𝗻 𝘁𝗲𝘀𝘁 - have a clear methodology that you can speak to in both technical and non-technical details
3️⃣ 𝗪𝗵𝗮𝘁 𝘁𝗼𝗼𝗹𝘀 𝗱𝗼 𝘆𝗼𝘂 𝘂𝘀𝗲 𝗳𝗼𝗿 𝗽𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗮𝗻𝗱 𝘄𝗵𝘆? - take this as an opportunity to demonstrate your skillset and deep knowledge of key tools, which you can speak to in detail to indicate your understanding
Position yourself further as a compelling candidate for cybersecurity roles by earning a cert like the PWPA (Practical Web Pentest Associate): hubs.la/Q04Dn64Z0
1️⃣ 𝗗𝗲𝘀𝗰𝗿𝗶𝗯𝗲 𝗮 𝗰𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗶𝗻𝗴 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝘀𝘀𝘂𝗲 𝗮𝗻𝗱 𝗵𝗼𝘄 𝘆𝗼𝘂 𝗵𝗮𝗻𝗱𝗹𝗲𝗱 𝗶𝘁 - use this as a problem-solving skills and your ability to handle difficult situations
2️⃣ 𝗧𝗮𝗹𝗸 𝗺𝗲 𝘁𝗵𝗿𝗼𝘂𝗴𝗵 𝘁𝗵𝗲 𝘀𝘁𝗮𝗴𝗲𝘀 𝗼𝗳 𝗮 𝘁𝘆𝗽𝗶𝗰𝗮𝗹 𝗽𝗲𝗻𝗲𝘁𝗿𝗮𝘁𝗶𝗼𝗻 𝘁𝗲𝘀𝘁 - have a clear methodology that you can speak to in both technical and non-technical details
3️⃣ 𝗪𝗵𝗮𝘁 𝘁𝗼𝗼𝗹𝘀 𝗱𝗼 𝘆𝗼𝘂 𝘂𝘀𝗲 𝗳𝗼𝗿 𝗽𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗮𝗻𝗱 𝘄𝗵𝘆? - take this as an opportunity to demonstrate your skillset and deep knowledge of key tools, which you can speak to in detail to indicate your understanding
Position yourself further as a compelling candidate for cybersecurity roles by earning a cert like the PWPA (Practical Web Pentest Associate): hubs.la/Q04Dn64Z0
2
1
4
2,390
As you continue to firm up your skillset with CTFs, don't forget about our Academy! It has 30 courses that will shape you into a better pentester. hubs.la/Q04DmVz50
Looking to become more involved with capture-the-flag competitions? Here are a few pointers to help you on mmendations for why and how to start.
𝗪𝗵𝘆 𝘀𝗵𝗼𝘂𝗹𝗱 𝗜 𝗱𝗼 𝗖𝗧𝗙𝘀? CTFs are clearly a way to refine your pentesting skillset, but let's be more specific. CTFs help participants develop their troubleshooting skills, learn about the underlying technologies they are testing, encourage learning in a safe environment, and can really appeal to people with a more competitive edge.
𝗪𝗵𝗮𝘁 𝗱𝗼 𝗜 𝗹𝗲𝗮𝗿𝗻? You can learn to use scripting languages like Python to automate tasks during the #CTF, and you can get more familiar with popular pentesting tools like Burp Suite.
𝗥𝗲𝗮𝗱𝘆 𝘁𝗼 𝘀𝘁𝗮𝗿𝘁? Choose any of the numerous beginner-friendly CTFs! Popular CTFs include SkillBit, OvertheWire, RootMe, and PicoCTF.
Be sure to bookmark hubs.la/Q04DmVWF0 if you decide you really want to go further with CTFs! 🕹️
Looking to become more involved with capture-the-flag competitions? Here are a few pointers to help you on mmendations for why and how to start.
𝗪𝗵𝘆 𝘀𝗵𝗼𝘂𝗹𝗱 𝗜 𝗱𝗼 𝗖𝗧𝗙𝘀? CTFs are clearly a way to refine your pentesting skillset, but let's be more specific. CTFs help participants develop their troubleshooting skills, learn about the underlying technologies they are testing, encourage learning in a safe environment, and can really appeal to people with a more competitive edge.
𝗪𝗵𝗮𝘁 𝗱𝗼 𝗜 𝗹𝗲𝗮𝗿𝗻? You can learn to use scripting languages like Python to automate tasks during the #CTF, and you can get more familiar with popular pentesting tools like Burp Suite.
𝗥𝗲𝗮𝗱𝘆 𝘁𝗼 𝘀𝘁𝗮𝗿𝘁? Choose any of the numerous beginner-friendly CTFs! Popular CTFs include SkillBit, OvertheWire, RootMe, and PicoCTF.
Be sure to bookmark hubs.la/Q04DmVWF0 if you decide you really want to go further with CTFs! 🕹️
0
1
4
2,498
𝗙𝗿𝗲𝗲 𝗬𝗼𝘂𝗧𝘂𝗯𝗲 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀! 🚨
Our YouTube channel has an assortment of free training content available. From full-length #cybersecurity and IT courses to ethical hacking course snippets to CTF walkthroughs, there's a lot going on at The Cyber Mentors.
Today's to what you can expect on our YouTube channel.
Use it to make the most out of the videos available - and happy learning!
Subscribe to the channel here: hubs.la/Q04Dc0230
If you're ready to take the next leap after checking out a few of our videos, take a look through our industry-recognized certifications: hubs.la/Q04Dc01F0
Our YouTube channel has an assortment of free training content available. From full-length #cybersecurity and IT courses to ethical hacking course snippets to CTF walkthroughs, there's a lot going on at The Cyber Mentors.
Today's to what you can expect on our YouTube channel.
Use it to make the most out of the videos available - and happy learning!
Subscribe to the channel here: hubs.la/Q04Dc0230
If you're ready to take the next leap after checking out a few of our videos, take a look through our industry-recognized certifications: hubs.la/Q04Dc01F0
0
2
8
3,057
Should you be using CTF platforms like SkillBit and Hack The Box as you progress in your cybersecurity journey?
In this episode of Ask a CISO, Alex Tushinsky (CISO of Educate360 and TCM Security) gives a resounding yes!
CTF platforms are a great way to sharpen your technical ting vulnerabilities, and build experience that can be valuable during real-world penetration tests.
But there's an important distinction: CTFs are a way to develop your skills, not a substitute for the full skill set required during a real-world engagement.
Have a question you'd like Alex to answer? Drop it in the comments! Your question might inspire a future Ask a CISO Short.
One surefire way to develop your #CTF and pentesting abilities: take a course with us, like Practical Bug Bounty! hubs.la/Q04D2Hvy0
In this episode of Ask a CISO, Alex Tushinsky (CISO of Educate360 and TCM Security) gives a resounding yes!
CTF platforms are a great way to sharpen your technical ting vulnerabilities, and build experience that can be valuable during real-world penetration tests.
But there's an important distinction: CTFs are a way to develop your skills, not a substitute for the full skill set required during a real-world engagement.
Have a question you'd like Alex to answer? Drop it in the comments! Your question might inspire a future Ask a CISO Short.
One surefire way to develop your #CTF and pentesting abilities: take a course with us, like Practical Bug Bounty! hubs.la/Q04D2Hvy0
2
1
8
2,590
TCM Security retweeted
🎵🎃 We hope all 1,222 of you enjoyed our Spooky Month Flash CTF Album. 🎃🎵
If you missed this one, don't worry. Our next Flash CTF is happening on Thursday, November 19th. You can register at bit.ly/4sGrM6z
Stay tuned for our next drop. 😎
If you missed this one, don't worry. Our next Flash CTF is happening on Thursday, November 19th. You can register at bit.ly/4sGrM6z
Stay tuned for our next drop. 😎
0
2
6
590
There's more to password cracking than throwing a massive wordlist at a bunch of hashes and hoping for the best. 🤞
When you're conducting a penetration test, having a solid methodology can make a real difference.
From looking for quick wins with tools like #Hashcat to building imenting with rulesets, identifying password patterns, and even incorporating #OSINT, there are plenty of techniques worth adding to your toolkit.
We've put together a five-step password cracking methodology to help you approach the process more systematically during authorized security assessments.
Swipe through the guide for a closer look, including some practical Hashcat examples.
Want to dig a little deeper? Check out the full walkthrough: hubs.la/Q04D3gcz0
𝗔𝗻𝗱 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗽𝗲𝗻𝘁𝗲𝘀𝘁𝗲𝗿𝘀: What's one password cracking tip or technique you'd add to this list?
When you're conducting a penetration test, having a solid methodology can make a real difference.
From looking for quick wins with tools like #Hashcat to building imenting with rulesets, identifying password patterns, and even incorporating #OSINT, there are plenty of techniques worth adding to your toolkit.
We've put together a five-step password cracking methodology to help you approach the process more systematically during authorized security assessments.
Swipe through the guide for a closer look, including some practical Hashcat examples.
Want to dig a little deeper? Check out the full walkthrough: hubs.la/Q04D3gcz0
𝗔𝗻𝗱 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗽𝗲𝗻𝘁𝗲𝘀𝘁𝗲𝗿𝘀: What's one password cracking tip or technique you'd add to this list?
0
1
12
2,892
Another blue team course worth mentioning: SOC 201 is an intermediate-level course that focuses on #threathunting and incident response.
It also has a corresponding cert: the PSAP (Practical #SOC Analyst Professional.)
Have you taken SOC 201 yet? If not, let's get started: hubs.la/Q04D1CBh0
Any ideas for future blue team courses? Drop your dream topics in the comments!
It also has a corresponding cert: the PSAP (Practical #SOC Analyst Professional.)
Have you taken SOC 201 yet? If not, let's get started: hubs.la/Q04D1CBh0
Any ideas for future blue team courses? Drop your dream topics in the comments!
2
3
23
3,777
Here's another OSINT challenge just in time for Halloween! Word is a famous vampire lives here (sometimes).
Enjoying these? Maybe you'll want to check out the PORP (Practical OSINT Research Professional) certification: hubs.la/Q04CHvPB0
Enjoying these? Maybe you'll want to check out the PORP (Practical OSINT Research Professional) certification: hubs.la/Q04CHvPB0
2
2
11
3,643
Our FINAL #OSINT challenge for Halloween is .... well ... where exactly is this again?
If you want a real OSINT challenge, try the PORP (Practical OSINT Research Professional.) Learn more about the cert here: hubs.la/Q04CHTND0
If you want a real OSINT challenge, try the PORP (Practical OSINT Research Professional.) Learn more about the cert here: hubs.la/Q04CHTND0
4
1
8
4,093
Let's talk C2 frameworks.
Command-and-control (#C2) frameworks are commonly used in penetration testing and red team engagements. They allow testers to interact with systems they've gained access to, execute commands and scripts remotely, collect results, and manage multiple zed assessment.
We've highlighted five C2 frameworks worth knowing. And the best part? Four of them are open source!
- 𝗖𝗼𝗯𝗮𝗹𝘁 𝗦𝘁𝗿𝗶𝗸𝗲
- 𝗦𝗹𝗶𝘃𝗲𝗿
- 𝗣𝘂𝗽𝘆
- 𝗘𝗺𝗽𝗶𝗿𝗲
- 𝗠𝘆𝘁𝗵𝗶𝗰 𝗖𝟮
Of course, this is just a starting point. 🧑💻
What would you add to the list? Got a favorite we missed? We know this community has opinions, and we want to hear them!
And if you want to really accelerate your pentesting journey and broaden your skillset, consider one of our certs like the PJPT (Practical Junior Penetration Tester). hubs.la/Q04CXLs10
Command-and-control (#C2) frameworks are commonly used in penetration testing and red team engagements. They allow testers to interact with systems they've gained access to, execute commands and scripts remotely, collect results, and manage multiple zed assessment.
We've highlighted five C2 frameworks worth knowing. And the best part? Four of them are open source!
- 𝗖𝗼𝗯𝗮𝗹𝘁 𝗦𝘁𝗿𝗶𝗸𝗲
- 𝗦𝗹𝗶𝘃𝗲𝗿
- 𝗣𝘂𝗽𝘆
- 𝗘𝗺𝗽𝗶𝗿𝗲
- 𝗠𝘆𝘁𝗵𝗶𝗰 𝗖𝟮
Of course, this is just a starting point. 🧑💻
What would you add to the list? Got a favorite we missed? We know this community has opinions, and we want to hear them!
And if you want to really accelerate your pentesting journey and broaden your skillset, consider one of our certs like the PJPT (Practical Junior Penetration Tester). hubs.la/Q04CXLs10
1
6
54
5,714
Spend some time this Sunday learning hardware and #IoT hacking! We have several hours of this course (created by Andrew Bellini) live on YouTube. And if you find you really like the content, maybe you'll want to join the academy! 😁
🔗 hubs.la/Q04CXpwf0
🔗 hubs.la/Q04CXpwf0
0
6
41
4,915