Rana Khalil 🇵🇸
@rana__khalil
Followers
51,249
Following
871
Media
546
Statuses
5,941
AppSec Team Lead | OSCP | CEO & Instructor of @ranakhalilacad
Canada
Joined March 2018
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Bolivia
• 682741 Tweets
Golpe de Estado
• 336701 Tweets
Georgia
• 238172 Tweets
Starmer
• 205784 Tweets
Luis Arce
• 178420 Tweets
Ejército
• 170822 Tweets
Knicks
• 168104 Tweets
La Paz
• 130944 Tweets
Sunak
• 129522 Tweets
Çekya
• 120822 Tweets
#BizimÇocuklar
• 117756 Tweets
#BBCDebate
• 99500 Tweets
Cenk
• 98027 Tweets
Kayla
• 89682 Tweets
Evo Morales
• 84709 Tweets
Barış Alper
• 84694 Tweets
Arda
• 80964 Tweets
#CZEvTUR
• 71149 Tweets
Juan José Zúñiga
• 69807 Tweets
Plaza Murillo
• 64062 Tweets
Hakan
• 59704 Tweets
#TURvÇEK
• 56835 Tweets
América Latina
• 55467 Tweets
Son 16
• 48085 Tweets
Slovakia
• 39745 Tweets
Mert
• 39563 Tweets
Kenan
• 39408 Tweets
Montella
• 33263 Tweets
Kerem
• 32809 Tweets
Jess
• 32702 Tweets
Forvet
• 31414 Tweets
Maçın
• 29930 Tweets
#GEOPOR
• 29785 Tweets
İsmail
• 28568 Tweets
Ferdi
• 28221 Tweets
Harriet
• 27262 Tweets
António Silva
• 26160 Tweets
Hakem
• 24770 Tweets
Avusturya
• 24098 Tweets
Semih
• 24087 Tweets
Mikautadze
• 20944 Tweets
Bill Cobbs
• 14318 Tweets
Ciaran
• 13933 Tweets
Pinned Tweet
It’s been tough being on social media the past couple of days. My own family, like thousands of Palestinians, was ethnically cleansed by Israel 75 years ago, and was denied the right of return to Palestine.
For 75 years, Israel has forcibly displaced entire Palestinian
0
195
1K
I can't believe it's finally over!
الحمد لله هذا من فضل ربي
239
70
2K
🚨 It's finally here! 🚨I'm happy to announce the launch of my new academy and new course!
This course teaches you how to hack web applications, automate your exploits in Python and defend web applications against real world attacks!
101
328
2K
1/ I'm getting a new wave of messages asking me how to approach the OSCP if you're a complete beginner. My advice is not to enrol in the OSCP labs right away. Instead, I would recommend completing the following items in this order to get a solid foundation first:
19
320
1K
SQL Injection theory video is up! In this video we talk about:
1 - What is a SQLi vulnerability?
2 - How to find SQLi vulnerabilities?
3 - How to exploit SQLi vulnerabilities?
4 - How to prevent SQLi vulnerabilities?
26
350
1K
This is beyond ridiculous. This form of Islamophobia and anti-Palestinian racism should not exist in the cybersecurity community, let alone from a vendor. Shame on you
@SentinelOne
for targeting a respected individual in the Cyber Security community for merely advocating for the
0
417
990
My OSCP Journey Review 🙂
48
235
978
I had a great time today recording a video with
@davidbombal
on how to get into the Pentesting / Ethical Hacking field! Can't wait for the video to come out! 😃
31
44
930
I'm officially done
@TJ_Null
's list of
@hackthebox_eu
machines! This took months of work, but I feel much more prepared going into the OSCP than I did when I first started working on my first box. All the write ups for the boxes can be found on my blog:
41
161
885
If you support Israel, do both of us a favour and consider unfollowing / blocking me.
It’s been disappointing discovering how many folks in tech Twitter support the illegal apartheid state of Israel. If you’re a mutual who fits this category, shame on you and block me back.
14
42
376
0
108
828
I'm happy to announce that I'm collaborating with
@davidbombal
to release my third course in the Mastering Web Application Pentesting Series on
@udemy
!
In this course, we cover Directory Traversal vulnerabilities 📁 🐞
🔗 Mastering Directory Traversal Vulnerabilities - The
39
106
741
Most people don't understand the amount of time that goes into creating content. Each video of mine, has to go through 5 phases:
1. Preparation - this phase involves preparing scripts / slides / content for the video. This phase takes up the most time.
2. Recording - this phase
39
70
723
The structure of my videos will be to first exploit the vulnerability manually and then script it. Here's a sample video of me scripting an SQLi exploit. Since the scripting portion takes up most of the video time, I'd like to know if that's something that you would find useful?
40
103
718
All 27 videos for the
@WebSecAcademy
Broken Access Control module have been uploaded and scheduled on Youtube! First video airs next Saturday (Jan. 21st)! 😃
🔗 Youtube Channel Link:
17
126
701
As promised, I've migrated all my writeups of
@TJ_Null
's list of HTB OSCP-like VMs to this GitBook. They are also backed up on Github ().
I'm still working on my OSCP review. That should be out in the next two weeks 😊
28
194
694
Just uploaded the final lab video for the
@WebSecAcademy
SQL Injection module. That makes 17 videos that took 17 weeks to complete 🥲 Ya'll better be experts at exploiting SQL injection vulnerabilities after the videos for this module are over lol
24
114
679
It's been almost two months since I passed the OSCP cert and I'm finally ready to start the OSWE cert 😃 This of course means that I'm going to be posting writeups for
@TJ_Null
's HTB OSWE-like VMs! This time around though, I'll be working on the boxes while I'm in the OSWE labs!
37
106
683
#OSCP
exam advice thread.
Someone recently asked me if I have any advice for the OSCP exam, and I decided to share it with everyone in case someone else finds it useful.
Here's the advice I gave:
22
219
664
I got this comment on on my Blind SQL Injection Youtube video and it made my day! 😊
12
23
654
We're at 10k subscribers! As promised, I'll be giving away 10 vouchers for my Web Security Academy course ().
If you're interested in entering the raffle, all you have to do is share and comment on this post! I'll announce winners this Sunday!
273
265
659
Four months later and it's finally here! Thank you
@offsectraining
for having a certification that allowed me to gain the fundamental knowledge I needed about pentesting. I personally learned a lot, not just in the cert but also all the prep work I had done for the cert ❤️
41
15
659
I have delayed all my October releases to November. The news is making me sick to my stomach. I can't get myself to post about cybersecurity when Israel is committing genocide against my own people.
0
87
648
I'm happy to announce that I'm collaborating with
@davidbombal
to release my fourth course in the Mastering Web Application Pentesting Series on
@udemy
!
In this course, we cover Command Injection vulnerabilities 💉 🐞
🔗 Mastering Command Injection Vulnerabilities - The
28
78
620
I'm honoured to be featured in
@offsectraining
's student spotlight ❤️ This certification has opened up so many avenues for me ❤️
In this student spotlight, OSCP holder
@rana__khalil
shares her thoughts on what it takes to succeed in cybersecurity:
9
50
478
25
27
605
I've released a Youtube video talking about my new collaboration with
@davidbombal
on the
@udemy
platform!
In this course, you gain access to:
🐞 A technical deep dive of SQL injection vulnerabilities
⏳ 9+ hours of HD content
🧪 Walkthroughs of 18 labs
➕ and much more!
20
86
553
Just got this in the mail 🎁🎁 Thank you
@hackthebox_eu
! It’s been an awesome fun filled year for
@hackthebox_yow
💚🖤
18
19
551
The Broken Access Control Complete Guide theory video has been posted on the academy!
Course Link:
13
109
541
I'm so honoured to win the Women in Cyber Security Middle East Cybersecurity Rising Star award! ❤️Congratulations to all the finalists and winners!
Our
#WiCSME2021
Women Cyber Security Rising Stars are a true reflection of the famous quote ‘Reach for the Stars and you just might become one!’ 🤩
3
3
36
37
25
528
I updated my Hack the Box OSCP Preparation Gitbook to include the Tabby & Magic writeups. I also reshuffled things to be more inline with
@TJ_Null
's updated list. I'll keep updating the gitbook as I do more boxes 😊
10
124
545
I had such an amazing time at
@Blackhatmea
in Saudi Arabia! 🇸🇦 This was the first conference I attend and speak at in the Middle East and by far the best conference I've ever been to ❤️
I got the opportunity to connect with and meet so many wonderful people! Everyone made me
14
23
524
New videos to be added soon to the Web Security Academy Series course? 👀😃
Course Link:
11
75
513
Attacking peaceful worshipers in their place of worship in a month where they're fasting is the most cowardice behaviour I've seen in my life. We exist and will continue to exist regardless of your cowardice and lowest of low attempts to wipe us off the earth.
#AlAqsaUnderAttack
32
109
513
If this isn't already obvious, I stand with the oppressed. I stand with the Palestinian people. 🇵🇸
1
53
496
#2020Goals
1. OSCP cert - I feel like I'm finally getting a grasp on the material and can get it done in the next 4 months.
2. AWAE cert - This is the cert that I actually want, but can't justify registering into until I get the OSCP.
It's going to be a tough year!
#bismillah
45
22
500
All three of my
@udemy
courses are now available on both Udemy marketplace and Udemy Business! So if you've bought a Udemy Business subscription or got one from work, you can use it to access my courses.
1️⃣ Mastering SQL Injection:
2️⃣ Mastering
2
61
484
Linux boxes - ✅
Windows boxes - ✅
More challenging than the OSCP boxes - 🗹
#6boxesleft
#almostthere
19
60
491
My Youtube channel reached a quarter of a million views last week! This is a huge milestone! 🤩🎉
34
8
473
So excited that my interview with
@davidbombal
finally came out! 😃
I get tons of questions everyday asking me how to get into pentesting and so David and I came up with an idea to collaborate and create a video answering the most commonly asked questions!
So, you want to be a Pentester?
Which of these is the Best?
YouTube video:
#cyber
#cybersecurity
#infosec
#hack
#hacker
#hacking
#cybersecuritytips
#pentesting
#oscp
#redteam
#informationsecurity
@rana__khalil
21
87
580
19
52
472
For those that don't know, I have a Medium blog and GitBook where I cover in detail how to solve OSCP-like HTB boxes!
🔗 Medium blog:
🔗 GitBook:
I found absolutely great source for beginners in Pentesting and it’s
@rana__khalil
!
She explains a lot of concepts in pentesting, security and her story is inspire! Really remind me my story as a self-taught crazy nerd.
#pentest
#comptia
#security
#python
#cyber
#cybersecurity
3
17
162
10
93
474
My YouTube channel hit a major milestone today - 2 million views! I'm beyond grateful for each and every one of you who subscribed to the channel and watch my content ❤️
الحمد لله هذا من فضل ربي
35
14
471
1. OSCP
2. HTB OSCP Preparation Gitbook. If you had told me last year that so many people would be including my name in the same posts as amazing individuals like
@thecybermentor
@ippsec
@TJ_Null
&
@TibSec
, I wouldn't have believed it
3. Moved to the pentest team at work
15
40
454
Considering the recent ethnic genocide of my people by Israel, it's been difficult to sit down and focus on recording the Web Security Academy weekly video. So the video is cancelled for this week. I'm hoping we could start it up again next week. Till then, stay safe! ✊🏻🇵🇸
28
20
438
My Youtube channel hit a milestone today - 500,000 views ❤️
38
15
435
Lab
#8
video in the Authentication Vulnerabilities module has been uploaded to the academy! 🎓 💻
🔗 Course Link:
7
89
433
For anyone interested in a VulnHub/HTB practice OSCP exam!
@johnjhacking
1. Brainpan 1 (BoF) -VulnHub
2. Sense (Easy) -HTB
3. Cronos (Medium) -HTB
4. Chatterbox (Medium) -HTB
5. Jeeves (Hard) -HTB
I found the OSCP exam to be much easier than HTB, but I tried my best to pick boxes that somewhat represent the difficulty I saw on the exam. Good Luck!
9
72
283
16
92
439
2/
1. Complete the
@thecybermentor
's Practical Ethical Hacking course
2. Complete
@TibSec
's Windows & Linux privesc courses
3. Go through
@TJ_Null
's list of OSCP-like HTB boxes
4. Enrol in the OSCP (3 months). Do the lab report and spend as much time as possible in the labs.
7
48
433
Beyond excited that this video came out! 🤩🤩 If you're interested in learning about the most critical security vulnerability facing web applications today, check out my interview with
@davidbombal
!
Free Web Hacking Course
YouTube video:
#hack
#hacking
#pentest
#pentesting
#infosec
#cyber
#xss
#javascript
#hacker
#html
#cybersecurity
@rana__khalil
7
124
442
13
61
424
Every time I feel imposter syndrome creeping up on me, I look at this pic and try to change my mindset to the one this dude has. Pretty healthy mindset in my opinion.
13
58
414
Look at what came in the mail! Thank you
@WiCSME
for the award! 🤩🥰🥰
The trophy broke in the mail but I managed to glue it back together 🙂
32
11
401
Kind of insane that my interview with
@davidbombal
reached over 100k views in less than a week! I'm always surprised by how many people are interested in learning about cybersecurity! 😃
21
38
386
Did
@Hacker0x01
just send me a Nintendo Switch Lite as a thank you gift for speaking at h
@cktivitiycon
?! 😮🤩
11
7
391
My second course in the Mastering Web Application Pentesting Series has been released on
@udemy
!
In this course, we cover authentication vulnerabilities 🔐
First 1000 people that use this link get the course for free:
The amazing
@rana__khalil
does it again!
New
@udemy
course on Mastering Authentication Vulnerabilities 😀
First 1,000 people that use this link get the course for free:
#infosec
#cyber
#hack
#hacker
#hacking
#CyberSecurity
#Pentesting
#Coding
31
42
230
13
70
380
Lab
#11
video in the Broken Access Control module has been uploaded on the academy! 🎓💻
🔗 Course Link:
2
68
385
Lab
#11
video in the Authentication Vulnerabilities module has been uploaded to the academy! 🎓💻
🔗 Course Link:
5
43
378
Lab
#1
video in the Broken Access Control module has been uploaded on the academy! 🙂
🔗 Course Link:
8
49
354
Last chance to register to my Mastering Command Injection course for free!
First 1,000 people that use this link get access to the course for free:
@davidbombal
I'm happy to announce that I'm collaborating with
@davidbombal
to release my fourth course in the Mastering Web Application Pentesting Series on
@udemy
!
In this course, we cover Command Injection vulnerabilities 💉 🐞
🔗 Mastering Command Injection Vulnerabilities - The
28
78
620
32
55
359
Goal
#1
- OSCP cert ✅
#2020Goals
1. OSCP cert - I feel like I'm finally getting a grasp on the material and can get it done in the next 4 months.
2. AWAE cert - This is the cert that I actually want, but can't justify registering into until I get the OSCP.
It's going to be a tough year!
#bismillah
45
22
500
34
16
358
My Youtube channel reached a ton of milestones this year! Thanks to everyone that was a part of it 💖
#MyYearOnYouTube
25
4
348
Let's start tweeting / retweeting all the pics/videos of Pro-Palestine protests to show that the ENTIRE world stands with Palestine! 🇵🇸✊🏼
13
116
341
SQL Injection theory video reached 10,000 views today! 🤩
14
31
348
Lab
#10
video in the Authentication Vulnerabilities module has been uploaded to the academy! 🎓💻
🔗 Course Link:
4
46
341
I’m happy to announce that I accepted a position as a Security Assessment Analyst at the Bank of Canada 😀 During the past few months I have had overwhelming support from the InfoSec community!
33
5
345
After adding all the videos for the CSRF and SQLi vulnerabilities, I realized that the videos are a total of 13 hours of content just to cover TWO vulnerabilities! By the time we're done with all the modules in the Web Security Academy, we're going to be at a 100+ hours!
26
38
339
I've been MIA for the past two weeks because I've been on vacation in Mexico! 🇲🇽🌴
I took a social media break during that time so I'm still catching up on my emails/dms/mentions. Hope everyone had a wonderful holiday! ❤️
15
2
337
The chapters feature has finally been pushed to my Youtube channel 😃
7
33
332
🧵 The Web Security Academy course has been updated to include 8 additional videos that cover the Server-Side Request Forgery (SSRF) vulnerability! In these videos you'll learn:
✅ Theory behind SSRF attacks
✅ How to conduct a basic SSRF attack to access a local server
✅ ...
6
55
341
I've also compiled the writeups for the list of OSCP-like boxes in this gitbook:
A common question asked is how do I best prepare for OSCP?
This list of OSCP-Like boxes from
@TJ_Null
+ writeups from
@rana__khalil
are great resources to use heading into the PWK lab!
Machine List:
Rana's Writeups:
#OSCP
#PWK
1
68
181
9
92
336
Another chance to get a free spot in my Mastering SQL Injection course!
To celebrate Rana's SQL Injection Udemy course getting a 4.9 rating, here are another 1,000 free places 😀
Note: Only first 1,000 people that use that link get the course for free.
#CyberSecurity
#SQL
#infosec
#Pentesting
#hack
#hacker
#hacking
#Coding
57
71
463
29
45
335
My Youtube channel hit a milestone today - 20,000 subscribers❤️
26
7
317
I need a change in "environment". Should I start an educational Youtube channel? If so, what type of content would you like covered?
I'm thinking I start with covering all the labs in
@WebSecAcademy
. I've alway wanted to do them but never got around to it.
36
13
323
April videos have been recorded, edited and scheduled!
13
18
316
Lab
#7
video in the Authentication Vulnerabilities module has been uploaded to the academy! 🎓 💻
🔗 Course Link:
4
51
313
1/ WIN A SUBSCRIPTION TO YOUR FAVOURITE HACKING LEARNING PLATFORM
14
151
306
I'm excited to announce that I'll be speaking at Black Hat Middle East and Africa 2023! The iconic cybersecurity conference is back in Riyadh. I will be sharing my experience and insights from the world of cybersecurity at the Briefings Stage. Join me 14-16 November 2023 in
17
20
301
Just wanted to say thank you to everyone that purchased the course on Udemy or on my Academy, subscribed to my Youtube channel and/or shared my posts / tweets ❤️
I have gotten hundreds of notifications since the collaboration announcement. I'll be going through all of them and
14
13
311
1/? One of my viewers gave me an idea and I wanted to get everyone's opinion on it.
I’ll start off by saying that the Web Security Academy videos will remain free and I will continue to upload them on YouTube.
25
18
305
We're almost at 10,000 subscribers on Youtube! When we reach 10k, I'll do 10 FREE giveaways for my new course! 🤩
🔗Link to Web Security Academy Series Course🔗:
24
49
301
Lab
#12
video in the Authentication Vulnerabilities module has been uploaded to the academy! 🎓💻
🔗 Course Link:
3
57
302
1/ First off, thank you for the tremendous support! I didn't realize the amount of people that have been reading my blogs and following my OSCP journey!
I have two exciting pieces of news to share with you:
10
15
306
I got the exact same reaction when I first started blogging about retired OSCP-like HTB boxes. But I did it anyways and for some reason people liked how I explained things. For the past couple of months, I've been averaging on over 20k views per month on Medium.
You do you.
15
17
305
I'm happy to announce that the
@WebSecAcademy
videos will be resuming to our regular schedule with weekly releases starting June 6th, 2021 😊
4
21
295
As 2023 comes to an end, I've taken a moment to look back on the year and I'm incredibly grateful for the work, achievements, and milestones I've accomplished! ❤️
I compiled a list of milestones I accomplished, in hopes of inspiring and motivating myself towards even greater
17
14
305
Lab
#10
video in the Broken Access Control module has been uploaded on the academy! 🎓💻
🔗 Course Link:
2
47
289
Before I announce the next
@WebSecAcademy
topic to be covered on my Youtube channel, let's play our usual game of Guess the Topic!
1. I'm a client-side vulnerability
2. I allow accessing data of other origins
3. I'm a result of a configuration gone wrong!
What is my name?
99
23
294
