Path 12: Network Security — KashSec Academy
Nmap, Wireshark, firewalls, VPNs, IDS/IPS, Wi-Fi attacks, MITM. 20 free lessons, intermediate level, starting with "Why network security matters"
Level: Intermediate · 20 lessons · Free, no account needed.
Lessons in this path
- Why network security matters — Mapping, watching, filtering — the three activities.
- Scan networks with Nmap — The classic scanner, from -sV to NSE scripts.
- See traffic with Wireshark — Watch real packets flow — plus tcpdump.
- Network Forensics Basics — Reconstructing what happened from a captured .pcap file after the fact.
- ARP Spoofing, Hands-On — How a classic local-network MITM actually gets established.
- Firewalls, VPNs, proxies — The everyday defensive stack.
- VPN Protocols: A Deep Dive — OpenVPN, WireGuard, IPsec, and the real tradeoffs between them.
- Network Segmentation in Practice — Designing real segments around trust boundaries, not organizational convenience.
- IDS, IPS & SIEM — Modern detection: from Snort to SOC to SOAR.
- Network Security Monitoring Tools — Zeek, Suricata, and Security Onion, named and mapped.
- Network Access Control (NAC) — 802.1X and posture assessment — deciding whether a device joins at all.
- Wi-Fi security & attacks — WPA2/3, evil twin, handshake capture.
- Bluetooth & IoT Network Security — BlueBorne, and the Mirai botnet as the definitive default-credential case study.
- DNS Attacks, Hands-On — Cache poisoning, hijacking, DNSSEC, and DoH/DoT.
- Man-in-the-Middle — How MITMs work, and how HTTPS defeats them.
- DDoS Attacks & Mitigation — Volumetric, protocol, and application-layer attacks, and how real infrastructure absorbs them.
- Cloud Network Security — Security groups and Network ACLs — this path's concepts, reimplemented in the cloud.
- Your network-security path — Red, blue, or engineering — pick a track.
- Advanced Nmap Lab — Master network scanning like a professional.
- Advanced Wireshark Lab — Go deeper with packet analysis.