MaccGenics Notes

Search CTRL + K

MaccGenics Notes

Search CTRL + K

00 - TAMU Brain

5th Semester (Fall 25)

CSCE-312

Ex1

Digital Logic Design 2

Digital Logic Design

Ex2

Machine-Level Programming I - Basics

Machine-Level Programming II - Control

Machine-Level Programming III - Procedures

Ex3

Machine-Level Programming IV - Data

Machine-Level Programming V - Advanced Topics

Program Optimization

Ex4

The Memory Hierarchy

Virtual Memory - Concepts

HWs

HW 02 - CMOS Full Adder - Learnings

HW 03 - Bits and Bytes

Labs

09-30-25 Lab 10

10-02-25 Lab 11

10-23-25 Lab 12

Machine Language - Procedures & Recursion

Machine Language - x86 Assembly

CSCE-314

Ex1

ADTs, Pattern Matching, Tuples, Guards

History & Functional Programming Primer

Laziness and Infinite Structures

Polymorphism, type classes, maybe, either

Recursion, Higher-Order Functions, Lambdas, Currying, Lists

Trees in Functional Programming

Ex2

Concurrency, Threads, Synchronization, and Deadlocks

Exceptions, Generics, and Collections in Java

Functional Reflection in Java

Inheritance, Polymorphism, and Interfaces

Model-View-Controller (MVC) and JavaFX

Object-Oriented Programming (Java)

In-class

In-class-7 Test Review 1

ADTs, Pattern Matching, Tuples, Guards

History & Functional Programming Primer

GEOL-101

Ch. 1 - Intro to Geology

Ch. 10 - Crustal Deformation

Ch. 11 - Earthquakes and Earthquake Hazards

Ch. 12 - Earth's Interior

Ch. 13 - Origin and Evolution of the Ocean Floor

Ch. 14 - Mountain Building

Ch. 15 - Mass Movement-The Work of Gravity

Ch. 16 - Running Water

Ch. 17 - Groundwater

Ch. 18 - Glaciers and Glaciation

Ch. 2 - Plate Tectonics

Ch. 21 - Global Climate Change

Ch. 22 - Earth's Evolution Through Geologic Time

Ch. 23 - Energy and Mineral Resources

Ch. 3 - Matter and Minerals

Ch. 4 - Igneous Rocks and Intrusive Activity

Ch. 5 - Volcanoes and Volcanic Hazards

Ch. 6 - Weathering and Soils

Ch. 7 - Sedimentary Rocks

Ch. 8 - Metamorphism and Metamorphic Rocks

Ch. 9 - Geologic Time

PHIL-282

Research

Research Proposal

Aristotle - Nicomachean Ethics

Cybersecurity and Cyberwar - what everyone needs to know

Democracy in the Digital Public Sphere

Individual or Instrument - GenAI's Current Place in the Art and Intellectual Property Worlds

Jurgen Habermas I - What Is Meant by 'Deliberative Democracy'? Objections and Misunderstandings. (p.81-103)

Jurgen Habermas II - Deliberative Democracy - An Interview (p.60-80)

Jurgen Habermas III - Reflections and Conjectures (p.1-21)

Jurgen Habermas IV (p.22-40)

Jurgen Habermas V - (p.41-59)

Kristen Worden Disengagement in the Digital Age

Liars and Outliers

Moral Machines - From Value Alignment to Embodied Virtue

New Social Media and Virtues

Privacy, Play, and the Digitalization of the University

Technology and Ethics

The Age of Surveillance Capitalism

STAT-211

HWs

Introduction to R

2 - Vectors in R

Midterm 1

Ch. 0 - Intro to Statistics

Ch. 1 - Statistical Concepts

Ch. 2 - Introduction to Probability

Ch. 3 - Continuous Distributions

Ch. 3 - Discrete Distributions

Midterm 2

Ch. 4 - Joint Distribution of Random Variables

Ch. 0 - Intro to Statistics

Ch. 1 - Statistical Concepts

Ch. 2 - Introduction to Probability

5th Semester (Fall 2025)

6th Semester (Spring 26)

CSCE-313

Assignments

Processes and Two's complement Arithmetic

Shell & Friends

Labs

Lab 1 - GDB Banking System Lab - Debugging with GDB

Lab 2 - Unix Pipes

Lecture

01 - OS, Process, Multitasking, and Virtual Memory

02 - Architectural Support for Operating Systems

03 - Inter Process Communication - Pipes and FIFO

CSCE-331

Readings

01 - Professional Presence

02 - Software Construction

03 - Software Design

04 - Software Development Methodologies

05 - Writing with Purpose

Project 1 - Personal Website

CSCE-421

01 - Linear Regression

02 - Logistic Regression For Binary Clasification

03 - Logistic Regression - From Binary to Multi-Class

CYBR-405

Digital Forensics Basics (AWR139)

M1 - Digital Forensics Overview

M2 - Computers, Mobile Devices, and Online Platforms Overview

M3 - Digital Evidence

M4 - Forensic Analysis

M5 - Forensic Reporting

M6 - Evidentiary Requirements

M7 - Expert Witness

01 - Intro to Digital Forensics

02 - Data Acquisition

03 - Digital Devices and Processing Crime Scenes

04 - Media Files and Digital Forensics

Physical Security Controls - Locks Lab

01 - Work (Chamba)

CAP

Network+

1. Networking - A Structured Approach

Authentication and Integrity

Common Ports and Services

Networking - A structured Approach

2. Network Components

Additional Devices

Hubs and Switches

Intrusion Detection - Prevention

Network Components

Routers and Modems

Storage Controller

VPN Concentrator

3. Network Topologies

Dynamic Multipoint Virtual Private Network

Hardware VPN Clients

Network Topologies

Peer-to-peer, Point-to-point, and Beyond

Remote Access VPN

Site-to-Site VPN

Split Tunneling vs. Full Tunneling

Star, Hub, Mesh, Bus, Ring

Virtual Private Network (VPN)

4. Network Services

Domain Name Service (DNS)

Dynamic Host Configuration Protocol (DHCP)

File Transfer Protocol - SFTP - TFTP

NetFlow & IPFIX

Network Address Translation (NAT)

Network Services

Network Time Protocol (NTP)

POP3(S) - IMAP(S)

Session Initiation Protocol

Software-Defined Networking

SQL - SQLnet - MySQL

Telnet and Secure Shell (SSH)

Voice Over IP Intro

5. WAN Technologies

Cellular Technologies

Frame Relay - ISDN - DSL

MPLS (Multiprotocol Label Switching)

Packet Switching vs. Circuit Switching

WAN Technologies

6. Network Cables and Connectors

Copper Connectors

Crossover Cables

Fiber Connectors

Media Converters

Network Cables and Connectors

Termination Points and EIA-TIA Wiring Standards

7. Ethernet Switch Operation

Broadcast Storms - Loop Prevention

Distributed Switching

Ethernet Switch operation

Link Aggregation

Port Mirroring for Traffic Analysis

Spanning Tree Protocol (STP)

Spanning Tree Protocol Advanced

STP Performance Tuning and Troubleshooting

Switch Forwarding Logic (Unicast, Multicast, Broadcast)

VLAN Configuration

8. Wireless LAN

Wireless Access Point (WAP)

Wireless LAN Antennas

Wireless LAN Security

Wireless LAN Standards

Wireless Router Setup

Wireless Site Survey

Wireless Troubleshooting

9. IPv4 Network Addressing

Binary Introduction

Classless Interdomain Routing (CIDR)

Directed Broadcast

Hexadecimal Introduction

IP Address management (IPAM)

IPv4 Network Addressing

Loopback Addressing

NAT - PAT - Overload

Private Addresses

Public Addresses

Subnetting Exercises

Subnetting Operations

10. IPv6 Networks

Coexisting with IPv4

Dual Stack (IPv4 & IPv6)

Hierarchical Routing

IPv6 Address Format

IPv6 Address Planning

IPv6 in the Real World

Link Local Address

Stateless Address Auto-Configuration (SLAAC)

11. IP Routing

Border Gateway Protocol (BGP) - Introduction

Enhanced Interior Gateway Routing Protocol (EIGRP)

Exterior Border Gateway Protocol (eBGP)

Gateway Redundancy

Intelligent Forwarding Operations

Interior Border Gateway Protocol (iBGP)

Open Shortest Path First (OSPF)

Route Redistribution

Routing Information Protocol (RIP)

12. Unified Communications Funcamentals

Classification and Marking

Congestion Management

QoS - Introduction

Service Level Agreements

Traffic Shaping and Policing

UC Products and Solutions

Unified Communications Fundamentals

Unified Communications Introduction

VoIP Suite of Protocols

14. Network Security

DNS Records Cheat Sheet

IEEE Specifications Cheat Sheet

Port Numbers Cheat Sheet

Security+

M10 - Third-party Vendor Risks

Contracts and Agreements

M10 Practice Quiz

Supply Chain Attacks

Supply Chain Risks

Third-party Vendor Risks (OBJ 2.2, 2.3, & 5.3)

Third-Party Vendor Risks

Vendor Assessment

Vendor Selection and Monitoring

M11 - Governance and Compliance

Governance and Compliance (OBJ 5.1 & 5.4)

Governance and Compliance

Governance considerations

Governance Structures

M11 Practice Quiz

Non-compliance Consequences

M12 - Asset and Change Management

Acquisition and Procurement

Asset and Change Management (OBJ 1.3, 4.1 & 4.2)

Asset and Change Management

Asset Disposal and Decommissioning

Asset Management

Change Management Process

Change Management

Documenting Changes

M12 Practice Quiz

Mobile Asset Deployments

Technical Implications of Changes

M13 - Audits and Assessments

Attestation of Findings

Audits and Assessments (OBJ 5.5)

Audits and Assessments

External Audits and Assessments

Internal Audits and Assessments

M13 Practice Quiz

Penetration Testing

Performing a Basic PenTest

Reconnaissance in Pentesting

M14 - Cyber Resilience and Redundancy

Capacity Planning

Continuity of Operations Plan

Cyber Resilience and Redundancy (OBJ 3.4)

Cyber Resilience and Redundancy

Data Redundancy

High Availability

M14 Practice Quiz

Powering Data Centers

Redundant Site Considerations

Resilience and Recovery Testing

M15 - Security Architecture

Centralized vs Decentralized Architectures

Embedded Systems

Infrastructure as Code (IaC)

Internet of Things (IoT)

M15 Practice Quiz

Network Infrastructure

On-premise versus the Cloud

Security Architecture (OBJ 3.1 & 4.1)

Security Architecture

Software-Defined Network (SDN)

Virtualization and Containerization

M16 - Security Infrastructure

Configuring Firewalls

Firewalls for Security

Infrastructure Considerations

M16 Practice Quiz

Network Appliances

Ports and Protocols

SD-WAN and SASE

Securing Network Communications

Security Infrastructure (OBJ 3.2 & 4.5)

Security Infrastructure

Selecting Infrastructure Controls

M17 - Identity and Access Management (IAM) Solutions

Access Control Models

Assigning Permissions

Identity and Access Management (IAM) Solutions (OBJ 2.4 & 4.6)

Identity and Access Management (IAM) Solutions

Identity and Access Management (IAM)

M17 Practice Quiz

Multifactor Authentication (MFA)

Password Attacks

Password Security

Privileged Access Management (PAM)

Single Sign-On (SSO)

M18 - Vulnerabilities and Attacks

Bluetooth Vulnerabilities and Attacks

Buffer Overflow

Hardware Vulnerabilities

M18 Practice Quiz

Mobile Vulnerabilities and Attacks

Operating System Vulnerabilities

Race Conditions

SQL and XML Injections

Vulnerabilities and Attacks (OBJ 2.2, 2.3, 2.4, 2.5, & 4.1)

Vulnerabilities and Attacks

Zero-day Vulnerabilities

M19 - Malicious Activity

Directory Traversal Attack

Distributed Denial of Service

Domain Name System (DNS) Attacks

Execution and Escalation Attack

Indicators of Compromise (IoC)

Injection Attacks

M19 Practice Quiz

Malicious Activity (OBJ 2.4)

Malicious Activity

On-path Attacks

Session Hijacking

M2 - Fundamentals of Security

Confidentiality

Fundamentals of Security (OBJ 1.1 and 1.2)

Fundamentals of Security

M2 Practice Quiz

Non-repudiation

Security Control Categories

Security Control Types

Threats and Vulnerabilities

M20 - Hardening

Changing Default Configurations

Data Encryption Levels

Hardening (OBJ .)

M20 Practice Quiz

Patch Management

Restricting Applications

Secure Baselines

Trusted Operating Systems

Updates and Patches

M21 - Security Techniques

Application Security

Endpoint Detection and Response

M21 Practice Quiz

Network Access Control (NAC)

Security Techniques (OBJ. )

Security Techniques

Selecting Secure Protocols

User Behavior Analytics

Web and DNS Filtering

Wireless Infrastructure Security

Wireless Security Settings

M22 - Vulnerability Management

Identifying Vulnerabilities

M22 Practice Quiz

Responsible Disclosure Programs

Threat Intelligence Feeds

Validating Vulnerability Remediation

Vulnerability Management (OBJ .)

Vulnerability Management

Vulnerability Reporting

Vulnerability Response and Remediations

M23 - Alerting and Monitoring

Alerting and Monitoring (OBJ .)

Alerting and Monitoring Activities

Alerting and Monitoring

Data from Security Tools

M23 Practice Quiz

Monitoring Resources

Network and Flow Analysis

Security Content Automation and Protocol (SCAP)

Security Information and Event Management (SIEM)

Simple Network Management Protocol (SNMP)

Single Pane of Glass

M24 - Incident Response

Data Collection Procedures

Digital Forensic Procedures

Disk Imaging and Analysis

Incident Response (OBJ 4.8)

Incident Response Process

Incident Response Training and Testing

Incident Response

M24 Practice Quiz

Root Cause Analysis

M25 - Investigating an Incident

Application Logs

Automated Reports

Investigating an Incident (OBJ 4.9)

Investigating an Incident

Investigative Data

M25 Practice Quiz

OS-specific Security Logs

Packet Captures

Security Dashboards

Vulnerability Scans

M26 - Automation and Orchestration

Automating Application Development

Automating Onboarding

Automating Security

Automation and Orchestration (OBJ 4.7)

Automation and Orchestration

Automation Support Tickets

Benefits of Automation and Orchestration

Integrations and APIs

M26 Practice Quiz

When to Automate and Orchestrate

M27 - Security Awareness

Avoiding Social Engineering

Creating a Culture of Security

M27 Practice Quiz

Password Managers

Policy and Handbooks

Recognizing Insider Threats

Remote and Hybrid Work Environments

Security Awareness (OBJ 5.6)

Security Awareness

M3 - Threat Actors

Insider Threats

M3 Practice Quiz

Nation-state Actor

Organized Crime

Outsmarting Threat Actors

Threat Actor Attributes

Threat Actor Motivations

Threat Actors (OBJ 1.2, 2.1, 2.2)

Threat Vectors and Attack Surfaces

Unskilled Attackers

M4 - Physical Security

Access Badge Cloning

Access Control Vestibules

Attacking with Brute Force

Bypassing Surveillance Systems

Fencing and Bollards

M4 Practice Quiz

Physical Security (OBJ 1.2 and 2.4)

Physical Security

Surveillance Systems

M5 - Social Engineering

Frauds and Scams

Influence Campaigns

M5 Practice Quiz

Motivational Triggers

Other Social Engineering Attacks

Phishing Attacks

Preventing Phishing Attacks

Social Engineering (OBJ 2.2 and 5.6)

Social Engineering

M6 - Malware

Backdoors and Logic Bombs

Indications of Malware Attacks

M6 Practice Quiz

Malware (OBJ 2.4)

Malware Attack Techniques

Spyware and Bloatware

Zombies and Botnets

M7 - Data Protection

Data Classification

Data Loss Prevention (DLP)

Data Protection (OBJ 1.4, 3.3, 4.2, 4.4, & 5.1)

Data Protection

Data Sovereignty

M7 Practice Quiz

M8 - Cryptographic Solutions

Asymmetric Algorithms

Cryptographic Attacks

Cryptographic Solutions (OBJ 1.4, 2.3, & 2.4)

Cryptographic Solutions

Digital Certificates

Encryption Tools

Hashing (OBJ 1.4)

Increasing Hash Security

M8 Practice Quiz

Public Key Infrastructure (PKI)

Symmetric Algorithms

Symmetric vs Asymmetric

M9 - Risk Management

M9 Practice Quiz

Qualitative Risk Analysis

Quantitative Risk Analysis

Risk Assessment Frequency

Risk Identification

Risk Management (OBJ 5.2)

Risk Management Strategies

Risk Management

Risk Monitoring and Reporting

Security+ Practice Tests

Sec+ Practice Test 1

Sec+ Practice Test 2

Sec+ Practice Test 3

Sec+ Practice Test 4

Sec+ Practice Test 5

Sec+ Practice Test 6

02 - Areas

CraftLab

CraftLab Management

HomeLab Physical Setup

Initializing Kubernetes Cluster

Set Up Kubernetes Cluster

Set Up Minecraft Server

Setting up Raspberry Pi's

Setting up worker nodes

Hackathon

Fall CTF 2025

FallCTF 25 (solved)

HowdyHack 2025

InnovaLab 2025

InnovaLab 2025 - ML Hackathon - Lakitus

Hackathon History

HackTheBox

HTB Academy

Bug Bounty Hunter

1. Web Requests

HTTP Methods and Codes

HTTP Requests and Responses

2. Introduction to Web Applications

Back End Servers

Cascading Style Sheets (CSS)

Common Web Vulnerabilities

Cross-Site Request Forgery (CSRF)

Cross-Site Scripting (XSS)

Development Frameworks & APIs

Front End vs. Back End

Introduction to Web Applications

Public Vulnerabilities

Sensitive Data Exposure

Some Web Application Attacks

Web Application Layout

3. Using Web Proxies

Automatic Modification

Encoding and Decoding

Intercepting Responses

Intercepting Web Requests

Intro to Web Proxies

Repeating Requests

Skills Assessment - Using Web Proxies

Using Web Proxies

4. Information Gathering - Web Edition

Automating Recon

Certificate Transparency (CT) Logs

Creepy Crawlies

DNS in Web Recon

DNS Zone Transfers

Information Gathering - Web Edition

Search Engine Discovery

Skills Assessment - Information Gathering - Web Edition

Subdomain Bruteforcing

Utilizing WHOIS

Web Reconnaissance

Well-Known URIs

5. Web Fuzzing

Directory and File Fuzzing

Filtering Fuzzing Output

Fuzzing tools (tooling)

Indentifying Endpoints

Intro to Fuzzing

Parameter and Value Fuzzing

Recursive Fuzzing

Skills Assessment - Web Fuzzing

Validating Findings

Virtual Host and Subdomain Fuzzing

6. JavaScript Deobfuscation

Basic & Advanced Obfuscation

Code Obfuscation

JavaScript Deobfuscation

Skills Assessment - JavaScript Deobfuscation

Source Code (web)

7. Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS)

Session Hijacking (XSS)

Skills Assessment - XSS

8. SQL Injection Fundamentals

Database Enumeration

Intro to Databases and types

Intro to SQL Injection

Intro to SQL Injections

Mitigating SQL Injection

SQL Injection Fundamentals

Subverting Query Logic

Union Injection

9. SQLMap Essentials

Database Enumeration with SQLMap

Handling SQLMap Errors

Running SQLMap on an HTTP Request

SQLMap Essentials

SQLMap Output Description

Bug Bounty Hunter

HTB Labs

Starting Point

Tier 0

Tier 1

Starting Point

Tier 0

Tier 1

HackTheBox Directory

03 - MaccGenics

Interface

MaccGenics Notes Home

Enter to select

to navigate

ESC to close

SQL Injection Fundamentals

#sql #attacks #web

Sections

Intro

SQL and XML Injections
Intro to SQL Injection

Databases

Intro to Databases and types

MySQL

Intro to MySQL
SQL Statements
Query Results
SQL Operators

SQL Injections

Intro to SQL Injections
Subverting Query Logic
Using Comments
Union Clause
Union Injection

Exploitation

Database Enumeration
Reading Files
Writing Files

Mitigations

Mitigating SQL Injection

Connected Pages

Depth

On this page

Sections
1. Intro
2. Databases
3. MySQL
4. SQL Injections
5. Exploitation
6. Mitigations

Pages mentioning this page

Bug Bounty Hunter