<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>h0m1c1de tutorials</title><description>Lab-safe hacking tutorials for beginners, intermediate learners, and seasoned security professionals.</description><link>https://h0m1c1de.com</link><language>en-us</language><item><title>Running a Purple Team Exercise</title><link>https://h0m1c1de.com/tutorials/running-a-purple-team-exercise</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/running-a-purple-team-exercise</guid><description>Plan, execute, and measure a collaborative exercise that tests real detections against emulated adversary techniques, end to end.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>advanced</category><category>purple team</category><category>detection engineering</category><category>att&amp;ck</category></item><item><title>A Safe Malware Analysis Lab</title><link>https://h0m1c1de.com/tutorials/safe-malware-analysis-lab</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/safe-malware-analysis-lab</guid><description>Build an isolated analysis environment with FLARE-VM and REMnux, handle samples safely, and perform first-pass static and behavioral triage.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>advanced</category><category>malware analysis</category><category>lab</category><category>blue team</category></item><item><title>Building a Recon Automation Pipeline</title><link>https://h0m1c1de.com/tutorials/recon-automation-pipeline</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/recon-automation-pipeline</guid><description>Chain subdomain discovery, probing, and change detection into a scope-safe pipeline that tells you when a target&apos;s attack surface changes.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>advanced</category><category>recon</category><category>automation</category><category>bug bounty</category></item><item><title>Think Like a Defender</title><link>https://h0m1c1de.com/tutorials/think-like-a-defender</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/think-like-a-defender</guid><description>How blue teams actually see your activity, using logs, ATT&amp;CK mapping, and detection rules, and why understanding them makes you a far better tester.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>advanced</category><category>blue team</category><category>detection</category><category>att&amp;ck</category></item><item><title>Writing a Pentest Report People Act On</title><link>https://h0m1c1de.com/tutorials/writing-a-pentest-report</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/writing-a-pentest-report</guid><description>Structure, severity rating, evidence, and remediation advice that make a report the most valuable thing you deliver.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>advanced</category><category>reporting</category><category>cvss</category><category>professional</category></item><item><title>Mobile App Testing Setup</title><link>https://h0m1c1de.com/tutorials/mobile-app-testing-setup</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/mobile-app-testing-setup</guid><description>Build an Android testing environment with an emulator, adb, and an intercepting proxy, then practice on intentionally vulnerable apps.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>intermediate</category><category>mobile</category><category>android</category><category>burp suite</category></item><item><title>Cloud Misconfigurations with flAWS</title><link>https://h0m1c1de.com/tutorials/cloud-misconfigurations-with-flaws</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/cloud-misconfigurations-with-flaws</guid><description>Learn how AWS environments really get breached, through public buckets, leaked keys, and metadata exposure, using the free flAWS challenges.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>intermediate</category><category>cloud</category><category>aws</category><category>misconfiguration</category></item><item><title>Active Directory Concepts in a GOAD Lab</title><link>https://h0m1c1de.com/tutorials/active-directory-concepts-with-goad</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/active-directory-concepts-with-goad</guid><description>Build the Game of Active Directory lab and learn the trust relationships, Kerberos tickets, and misconfigurations that drive internal assessments.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>intermediate</category><category>active directory</category><category>windows</category><category>lab</category></item><item><title>Operator Tradecraft Nobody Teaches You</title><link>https://h0m1c1de.com/tutorials/operator-tradecraft</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/operator-tradecraft</guid><description>The unglamorous habits that separate professionals from hobbyists, including session logging, clean environments, note systems, and safe handling of client data.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>intermediate</category><category>workflow</category><category>professional</category><category>opsec</category></item><item><title>Bug Bounty Methodology and Responsible Disclosure</title><link>https://h0m1c1de.com/tutorials/bug-bounty-methodology</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/bug-bounty-methodology</guid><description>How to pick programs, read scope like a lawyer, find bugs others miss, and write reports that get paid instead of closed.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>intermediate</category><category>bug bounty</category><category>disclosure</category><category>web</category></item><item><title>Password Security from the Defender&apos;s Side</title><link>https://h0m1c1de.com/tutorials/password-security-for-defenders</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/password-security-for-defenders</guid><description>How passwords are stored, why they fall, what modern guidance actually says, and how to measure your own policy in a lab.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>passwords</category><category>hashing</category><category>defense</category></item><item><title>OSINT Fundamentals</title><link>https://h0m1c1de.com/tutorials/osint-fundamentals</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/osint-fundamentals</guid><description>Map an organization&apos;s public footprint ethically, from domains and certificates to leaked code, and learn to audit your own exposure.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>osint</category><category>recon</category><category>privacy</category></item><item><title>Reading Packets with Wireshark</title><link>https://h0m1c1de.com/tutorials/wireshark-packet-analysis</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/wireshark-packet-analysis</guid><description>Capture and dissect network traffic, write display filters that find what matters, and reconstruct conversations from a packet capture.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>wireshark</category><category>networking</category><category>forensics</category></item><item><title>How to Approach Your First CTF</title><link>https://h0m1c1de.com/tutorials/your-first-ctf</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/your-first-ctf</guid><description>CTF categories explained, a repeatable way to attack a challenge, and how to get unstuck without just reading the answer.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>ctf</category><category>mindset</category><category>practice</category></item><item><title>Web Hacking 101 with Burp Suite</title><link>https://h0m1c1de.com/tutorials/web-hacking-101-burp-suite</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/web-hacking-101-burp-suite</guid><description>Proxy your browser through Burp, understand what an HTTP request really contains, and use Repeater to test how an application handles input.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>web</category><category>burp</category><category>http</category></item><item><title>Network Recon with Nmap</title><link>https://h0m1c1de.com/tutorials/network-recon-with-nmap</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/network-recon-with-nmap</guid><description>Discover hosts, open ports, service versions, and quick wins with Nmap, then read the output like a pentester.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>recon</category><category>nmap</category><category>network</category></item><item><title>Linux Command Line for Hackers</title><link>https://h0m1c1de.com/tutorials/linux-command-line-for-hackers</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/linux-command-line-for-hackers</guid><description>The shell skills every security tutorial assumes you already have, from navigation and permissions to pipes, processes, and networking.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>linux</category><category>bash</category><category>fundamentals</category></item><item><title>Build Your Hacking Lab</title><link>https://h0m1c1de.com/tutorials/build-your-hacking-lab</link><guid isPermaLink="true">https://h0m1c1de.com/tutorials/build-your-hacking-lab</guid><description>Set up an isolated virtual lab with an attack box and vulnerable targets so you can practice without breaking the law or your home network.</description><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>beginner</category><category>lab</category><category>virtualization</category><category>kali</category></item></channel></rss>