Senior Instructor

Clint Kehr

Ethical Hacker

Clint is a technical manager for a financial services company’s Responsible Disclosure Team, where he interacts with ethical hackers who find vulnerabilities in the company’s infrastructure.

See More
Rating
25
courses
courses

Courses

false
true
false
Course
1
H:
5
M
1
CEUS

CVE Series: Jenkins Arbitrary File Leak Vulnerability (CVE-2024-23897)

CVE-2024-23897 is a critical security flaw affecting Jenkins, a Java-based open-source automation server widely used for application building, testing, and deployment. It allows unauthorized access to files through the Jenkins integrated command line interface (CLI), potentially leading to remote code execution (RCE).

Learn More & Enroll
false
true
false
Course
1
H:
25
M
1
CEUS

CVE Series: Authentication Bypass Leading to Remote Code Execution (RCE) in JetBrains TeamCity (CVE-2024-27198)

CVE-2024-27198 is a critical vulnerability in JetBrains TeamCity, a Java-based open-source automation server used for application building. This flaw allows remote, unauthorized attackers to circumvent authentication, thereby gaining admin control over the server. All versions of TeamCity On-Premises up to 2023.11.3 are affected.

Learn More & Enroll
false
true
false
Course
1
H:
25
M
1
CEUS

CVE Series: “Leaky Vessels” Container Breakout (CVE-2024-21626)

CVE-2024-21626 is a severe vulnerability affecting all versions of runc up to 1.1.11, a critical component utilized by Docker and other containerization technologies like Kubernetes. This vulnerability enables an attacker to escape from a container to the underlying host operating system. Put on your red team hat to exploit this vulnerability.

‍

Learn More & Enroll
false
true
false
Course
1
H:
35
M
1
CEUS

CVE Series: Authentication Bypass in Apache Superset (CVE-2023-27524)

CVE-2023-27524 is a critical vulnerability in Apache Superset, affecting versions up to 2.0.1. It enables attackers to bypass authentication by exploiting weak or default SECRET_KEY values. Attackers can forge session cookies to gain admin access, leading to potential remote code execution and unauthorized data access.

‍

Learn More & Enroll
false
true
false
Course
1
H:
5
M
1
CEUS

CVE Series: Confluence Authentication Vulnerability (CVE-2023-22515)

Confluence suffers from a Broken Access Control vulnerability that affects Data Center and Server versions 8.0.0 to 8.3.2, 8.4.0 to 8.4.2, and 8.5.0 to 8.5.1. Threat actors exploit this vulnerability to obtain administrator access to Confluence servers. Put on your Red Team hat to create your own malicious admin account leveraging this CVE!

Learn More & Enroll
false
true
false
Course
1
H:
0
M
1
CEUS

CVE Series: Openfire (CVE-2023-32315)

If you're a cybersecurity practitioner who wants to know more about how to exploit and defend against CVE-2023-32315 (Openfire Path Traversal to RCE), you won't want to miss this course. You will identify the vulnerability, exploit it, and mitigate it in a hands-on, secure lab environment. Don't let Openfire catch you off guard.
Learn More & Enroll
false
true
false
Course
2
H:
37
M
3
CEUS

OWASP Top 10 - A08:2021 - Software and Data Integrity Failures

The OWASP Top 10 features the most critical web application security vulnerabilities. In this part, A08: Software and Data Integrity Failures, you'll take advice from a trusted offensive security professional on how to implement best practices for data and software integrity verification and risk mitigation.
Learn More & Enroll
false
true
false
Course
1
H:
34
M
2
CEUS

OWASP Top 10 - A04:2021 - Insecure Design

The OWASP Top 10 features the most critical web application security vulnerabilities. In this part, A04: Insecure Design, you'll take advice from a trusted offensive security professional on how to use threat modeling and other techniques to protect your organization against critical design flaws that adversaries could exploit.
Learn More & Enroll
false
true
false
Course
2
H:
4
M
2
CEUS

OWASP Top 10 - A09:2021 - Security Logging and Monitoring Failures

The OWASP Top 10 features the most critical web application security vulnerabilities. In this part, A09: Security Logging and Monitoring Failures, you'll take advice from a trusted offensive security professional on how to implement best practices for developing security logging and monitoring solutions at your organization.
Learn More & Enroll
false
true
false
Course
1
H:
45
M
2
CEUS

CVE Series: Log4J (CVE-2021-44228)

The Log4J vulnerability (CVE-2021-44228) took the world by storm in late 2021. Do you have what it takes to exploit and mitigate this critical vulnerability that experts say had the biggest global impact since Shellshock? Find out in this course, where you'll put your defensive and pen testing skills to the ultimate test in a virtual lab.
Learn More & Enroll
false
true
false
Course
2
H:
10
M
2
CEUS

OWASP Top 10 - A10:2021 - Server-Side Request Forgery (SSRF)

The OWASP Top 10 features the most critical web application security vulnerabilities. In this part, A10: Server-Side Request Forgery (SSRF), you'll learn to identify, exploit, and offer remediation advice for this vulnerability in a secure lab environment. Build your offensive security and penetration testing skills with this one-of-a-kind course!
Learn More & Enroll
false
true
false
Course
2
H:
46
M
4
CEUS

OWASP Top 10 - A05:2021 - Security Misconfiguration

The OWASP Top 10 features the most critical web application security vulnerabilities. In this part, A05: Security Misconfiguration, you'll identify, exploit, and offer remediation advice for this vulnerability. We also cover XML External Entities. Build your offensive security and penetration testing skills with this one-of-a-kind course!
Learn More & Enroll

About Clint Kehr

Clint is a technical manager for a financial services company’s Responsible Disclosure Team, where he interacts with ethical hackers who find vulnerabilities in the company’s infrastructure. Clint is a former Special Agent with the Department of Justice where he specialized in internet investigations and conducted numerous cases on cyber threat actors on the surface, deep, and dark web, resulting in Clint earning the Attorney General’s Distinguished Service Award. Clint has trained over 1,000 law enforcement officers, prosecutors, and civilians on the dark web and dark market websites. Clint has a master’s degree in intelligence studies from American Military University where he graduated with honors and also has a master’s degree in Information Technology from Carnegie Mellon University where he graduated with highest distinction. As a former Navy Reserve Officer, Clint served in many roles, such as a division officer and department head for commands in the information warfare community.