TCM Security

TCM Security At TCM Security Academy, we believe in quality training at an affordable price. Advance your career and your wallet with our content.
(1)

Today we're sharing some resources for Linux privilege escalation. Use this as a starter pack whether you're currently w...
09/01/2026

Today we're sharing some resources for Linux privilege escalation. Use this as a starter pack whether you're currently working on a pe*******on test or studying for the PNPT.

Find resources for automated privesc, escalation paths in SUDO, and more.

We plan on updating this quarterly, so let us know what we missed in the comments!

Get the PNPT (Practical Network Pe*******on Tester) package here: https://hubs.la/Q04v_RWL0

Intro to Windows Forensics dropped earlier this year! Have you checked it out yet?This course covers essential forensics...
08/31/2026

Intro to Windows Forensics dropped earlier this year! Have you checked it out yet?

This course covers essential forensics concepts, like:

- Understanding the investigative mindset ๐Ÿ•ต๏ธ
- Learning digital evidence sources ๐Ÿ”Ž
- Getting to know DFIR software & hardware ๐Ÿ–ฅ๏ธ

Sign up for the TCM Security Academy here (if you're not a member already): https://hubs.la/Q04vPNGf0

In case you missed it, we dropped updated version of our AI tools and resources guide for pe*******on testers. If you're...
08/31/2026

In case you missed it, we dropped updated version of our AI tools and resources guide for pe*******on testers. If you're curious how artificial intelligence can give you a competitive edge in pentesting, this guide is worth your time. ๐Ÿ’กโŒš

What's included in this version:

๐—–๐—”๐—œ for building your own red-team, blue-team, and bug-bounty agents
๐—ฆ๐˜๐—ฟ๐—ถ๐˜… for autonomous pentesting, with a no-setup cloud option ๐—ก๐—ฒ๐—ฏ๐˜‚๐—น๐—ฎ for an AI assistant that lives right in your terminal
๐—ฉ๐˜‚๐—น๐—ป๐—›๐˜‚๐—ป๐˜๐—ฟ for hunting real zero-days in Python code
๐—ฃ๐—ฒ๐—ป๐˜๐—”๐—š๐—œ for handing off the heavy lifting entirely

๐—ฃ๐—ฟ๐—ผ ๐˜๐—ถ๐—ฝ: a couple of these (๐—ฉ๐˜‚๐—น๐—ป๐—›๐˜‚๐—ป๐˜๐—ฟ and ๐—ฃ๐—ฒ๐—ป๐˜๐—”๐—š๐—œ) can fire off a lot of model calls, so set a ๐˜€๐—ฝ๐—ฒ๐—ป๐—ฑ๐—ถ๐—ป๐—ด ๐—น๐—ถ๐—บ๐—ถ๐˜ on your API key before you turn them loose. Your wallet will thank you.

Want to become a better pentester when it comes to testing AI and LLMs? Get the PAPA (Practical AI Pentest Associate) here: https://hubs.la/Q04vL4H90

Did you know that we offer a C # 101 for Hackers course? ๐Ÿง‘โ€๐Ÿ’ปWe proudly offer an assortment of programming courses in the...
08/29/2026

Did you know that we offer a C # 101 for Hackers course? ๐Ÿง‘โ€๐Ÿ’ป

We proudly offer an assortment of programming courses in the TCM Security Academy, and this is one of our newer additions.

Created by CISO Alex Tushinksy, this course will help you learn and build your confidence with C #, which you can use to help you build tools, automate tasks, and further understand Windows and .net applications.

Read more about the course and see what else is waiting for you in the TCM Security Academy: https://hubs.la/Q04vKXCy0

SSRF can be one of the trickiest - and most impactful - vulnerabilities youโ€™ll encounter during a web application pe****...
08/29/2026

SSRF can be one of the trickiest - and most impactful - vulnerabilities youโ€™ll encounter during a web application pe*******on test.

So, how does it work? And more importantly, how can you identify, verify, exploit, and prevent it?

Letโ€™s explore SSRF (Server-Side Request Forgery). In this guide, youโ€™ll learn:

๐Ÿ“Œ How SSRF occurs in web applications
๐Ÿ“Œ Strategies for detecting it
๐Ÿ“Œ How to verify potential SSRF vulnerabilities
๐Ÿ“Œ Exploiting SSRF during a pentest or bug bounty hunt
๐Ÿ“Œ How to prevent SSRF vulnerabilities in the first place

Want to dive deeper into web application security?

Check out one of the TCM Security web app certs, like the PWPA (Practical Web Pentest Associate) and PWPP (Practical Web Pentest Professional.)

Read about the PWPP here: https://hubs.ly/Q04vCNxs0

Have you heard about the TCM Security affiliate program?We're accepting applications. Get 10% of every live training or ...
08/28/2026

Have you heard about the TCM Security affiliate program?

We're accepting applications. Get 10% of every live training or certification you help us sell plus access to some special perks. ๐Ÿ–ค

๐˜–๐˜ฏ๐˜ฆ ๐˜ฐ๐˜ง ๐˜ถ๐˜ด! ๐˜–๐˜ฏ๐˜ฆ ๐˜ฐ๐˜ง ๐˜ถ๐˜ด!

Let's go: https://hubs.la/Q04vLF7r0

Trying to break into cybersecurity can feel a lot less intimidating when you have a roadmap.Our Security Operations Lear...
08/28/2026

Trying to break into cybersecurity can feel a lot less intimidating when you have a roadmap.

Our Security Operations Learning Path was built for people who want a structured way to move from the fundamentals into SOC and security analyst work, and then keep building toward more advanced roles.

The path starts with foundational IT, Linux, help desk, and soft skills, then moves into security fundamentals, SOC analysis, detection engineering, and more advanced SOC work.

Swipe through to see:

๐Ÿ”น ๐—ช๐—ต๐—ผ ๐˜๐—ต๐—ถ๐˜€ ๐—ฝ๐—ฎ๐˜๐—ต ๐—ถ๐˜€ ๐—ฑ๐—ฒ๐˜€๐—ถ๐—ด๐—ป๐—ฒ๐—ฑ ๐—ณ๐—ผ๐—ฟ
๐Ÿ”น ๐—ช๐—ต๐—ฎ๐˜ ๐˜†๐—ผ๐˜‚โ€™๐—น๐—น ๐—น๐—ฒ๐—ฎ๐—ฟ๐—ป ๐—ฎ๐˜ ๐—ฒ๐—ฎ๐—ฐ๐—ต ๐˜€๐˜๐—ฎ๐—ด๐—ฒ
๐Ÿ”น ๐—›๐—ผ๐˜„ ๐˜๐—ต๐—ฒ ๐—ฝ๐—ฟ๐—ผ๐—ด๐—ฟ๐—ฒ๐˜€๐˜€๐—ถ๐—ผ๐—ป ๐—ฏ๐˜‚๐—ถ๐—น๐—ฑ๐˜€ ๐—ณ๐—ฟ๐—ผ๐—บ ๐—ณ๐˜‚๐—ป๐—ฑ๐—ฎ๐—บ๐—ฒ๐—ป๐˜๐—ฎ๐—น๐˜€ ๐˜๐—ผ ๐—ง๐—ถ๐—ฒ๐—ฟ ๐Ÿฎโ€“๐Ÿฏ ๐˜€๐—ธ๐—ถ๐—น๐—น๐˜€
๐Ÿ”น ๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ถ๐—ป๐—ฐ๐—น๐˜‚๐—ฑ๐—ฒ๐—ฑ ๐—ถ๐—ป ๐˜๐—ต๐—ฒ ๐—ณ๐˜‚๐—น๐—น ๐—Ÿ๐—ฒ๐—ฎ๐—ฟ๐—ป๐—ถ๐—ป๐—ด ๐—ฃ๐—ฎ๐˜๐—ต

If Security Operations is the direction you want to go, this is one way to begin putting the pieces together.

Get started here: https://hubs.la/Q04vChC10

08/27/2026

Watch this short for a simple 3-step methodology to threat hunting! You can use it to guide structured threat hunts. ๐ŸŽฏ

Planning on giving it a try? Tell us in the comments!

Go further with threat hunting in our intermediate-level SOC 201 course, which also covers incident response in depth. https://hubs.la/Q04vqYYN0

Active Directory pentesting comes with a pretty deep toolbox. But which tools are actually worth knowing?We rounded up 5...
08/27/2026

Active Directory pentesting comes with a pretty deep toolbox. But which tools are actually worth knowing?

We rounded up 5 of our favorites for different parts of the process, from identifying AD risks and enumerating the domain to mapping attack paths and working with captured hashes.

Swipe through for a quick look at:
๐Ÿ”ด PingCastle
๐Ÿ”ด ldapdomaindump
๐Ÿ”ด BloodHound
๐Ÿ”ด PlumHound
๐Ÿ”ด Hashcat

What Active Directory tool would you add to the list? ๐Ÿ‘‡

Here are a few crowdsourced recommendations we've received previously:
โ–ช๏ธImpacket
โ–ช๏ธNetExec
โ–ช๏ธKerbrute

We'll be hosting a Hacking & Defending Active Directory Live Training this October and December! Sign up for one of those sessions here: https://hubs.la/Q04v82BQ0

Check out this infographic for some resume red flags to watch out for!We're all guilty of a few of these at some point. ...
08/26/2026

Check out this infographic for some resume red flags to watch out for!

We're all guilty of a few of these at some point. But finding and correcting them to make yourself more appealing to recruiters and hiring managers can make a huge difference.

A quick rundown of red flags goes as follows ๐Ÿšฉ

๐Ÿญ. ) ๐—œ๐—ป๐—ฐ๐—น๐˜‚๐—ฑ๐—ถ๐—ป๐—ด ๐˜๐˜†๐—ฝ๐—ผ๐˜€ & ๐˜€๐—น๐—ผ๐—ฝ๐—ฝ๐˜† ๐—ฝ๐—ฟ๐—ผ๐—ผ๐—ณ๐—ฟ๐—ฒ๐—ฎ๐—ฑ๐—ถ๐—ป๐—ด

๐Ÿฎ. ) ๐—Ÿ๐—ถ๐˜€๐˜๐—ถ๐—ป๐—ด ๐—ฑ๐˜‚๐˜๐—ถ๐—ฒ๐˜€, ๐—ก๐—ข๐—ง ๐˜„๐—ถ๐—ป๐˜€

๐Ÿฏ. ) ๐—™๐—ฎ๐—ถ๐—น๐—ถ๐—ป๐—ด ๐˜๐—ผ ๐—ถ๐—ป๐—ฐ๐—น๐˜‚๐—ฑ๐—ฒ ๐—ป๐˜‚๐—บ๐—ฏ๐—ฒ๐—ฟ๐˜€ ๐—ผ๐—ฟ ๐—ผ๐˜๐—ต๐—ฒ๐—ฟ ๐—ธ๐—ถ๐—ป๐—ฑ๐˜€ ๐—ผ๐—ณ ๐˜€๐˜‚๐—ฏ๐˜€๐˜๐—ฎ๐—ป๐˜๐—ถ๐—ฎ๐—น ๐—ฝ๐—ฟ๐—ผ๐—ผ๐—ณ

๐Ÿฐ. ) ๐—Ÿ๐—ฎ๐—ฐ๐—ธ๐—ถ๐—ป๐—ด ๐—ฐ๐—ฟ๐—ฒ๐—ฎ๐˜๐—ถ๐˜ƒ๐—ถ๐˜๐˜† ๐˜„๐—ต๐—ฒ๐—ป ๐—ฎ๐—น๐˜€๐—ผ ๐—น๐—ฎ๐—ฐ๐—ธ๐—ถ๐—ป๐—ด ๐—ฒ๐˜…๐—ฝ๐—ฒ๐—ฟ๐—ถ๐—ฒ๐—ป๐—ฐ๐—ฒ

๐Ÿฑ. ) ๐—™๐—ฒ๐—ฎ๐˜๐˜‚๐—ฟ๐—ถ๐—ป๐—ด ๐—ผ๐˜‚๐˜-๐—ผ๐—ณ-๐—ฑ๐—ฎ๐˜๐—ฒ ๐—ฐ๐—ผ๐—ป๐˜๐—ฒ๐—ป๐˜

๐Ÿฒ. ) ๐— ๐—ฎ๐—ธ๐—ถ๐—ป๐—ด ๐˜€๐˜๐˜‚๐—ณ๐—ณ ๐˜‚๐—ฝ ๐—ผ๐—ฟ ๐—ฏ๐—ฒ๐—ถ๐—ป๐—ด ๐˜๐—ผ๐—ผ ๐—ต๐˜‚๐—บ๐—ฏ๐—น๐—ฒ

๐Ÿณ. ) ๐—Ÿ๐—ฒ๐˜๐˜๐—ถ๐—ป๐—ด ๐—”๐—œ ๐˜๐—ฎ๐—ธ๐—ฒ ๐˜๐—ต๐—ฒ ๐˜„๐—ต๐—ฒ๐—ฒ๐—น ๐˜๐—ผ๐—ผ ๐—ณ๐—ฎ๐—ฟ

๐Ÿด. ) ๐—ฆ๐—ธ๐—ถ๐—ฝ๐—ฝ๐—ถ๐—ป๐—ด ๐—ฎ ๐˜€๐—ฒ๐—ฐ๐—ผ๐—ป๐—ฑ ๐—ต๐˜‚๐—บ๐—ฎ๐—ป ๐—ฝ๐—ฒ๐—ฟ๐˜€๐—ฝ๐—ฒ๐—ฐ๐˜๐—ถ๐˜ƒ๐—ฒ

One way to boost your resume? Taking a few courses or earning a certification at the TCM Security Academy.

See our most up-to-date course catalog here: https://hubs.la/Q04vg4gk0

Address

Charlotte, NC
28202

Alerts

Be the first to know and let us send you an email when TCM Security posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to TCM Security:

Shortcuts

Share