{"id":324,"date":"2026-07-27T09:50:40","date_gmt":"2026-07-27T09:50:40","guid":{"rendered":"https:\/\/masterkurniawan.my.id\/?p=324"},"modified":"2026-07-30T07:07:43","modified_gmt":"2026-07-30T07:07:43","slug":"dashboard-bootcamp-x-code-hackerbootcamp-asia-platform-pembelajaran-cyber-security-terintegrasi","status":"publish","type":"post","link":"https:\/\/masterkurniawan.my.id\/index.php\/2026\/07\/27\/dashboard-bootcamp-x-code-hackerbootcamp-asia-platform-pembelajaran-cyber-security-terintegrasi\/","title":{"rendered":"Dashboard Bootcamp X-code (HackerBootcamp.asia): Platform Pembelajaran Cyber Security Terintegrasi"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"511\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/xx1-1024x511.png\" alt=\"\" class=\"wp-image-326\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/xx1-1024x511.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/xx1-300x150.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/xx1-768x383.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/xx1.png 1418w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Dalam sebuah bootcamp cyber security, materi pembelajaran yang baik perlu didukung oleh platform yang mampu mengelola seluruh proses belajar secara terintegrasi. Oleh karena itu, X-code mengembangkan <strong>Dashboard HackerBootcamp<\/strong> sebagai pusat aktivitas peserta selama mengikuti program <strong>Penetration Testing &amp; Cyber Security Engineer Bootcamp<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dashboard ini tidak hanya berfungsi sebagai Learning Management System (LMS), tetapi juga sebagai portal pembelajaran yang mengintegrasikan materi, video, laboratorium, tools, komunitas, hingga sistem ujian dalam satu tempat.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Dashboard Utama<\/h1>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"404\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/1x-1024x404.png\" alt=\"\" class=\"wp-image-325\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/1x-1024x404.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/1x-300x119.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/1x-768x303.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/1x-1536x607.png 1536w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/1x.png 1843w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"424\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x2-1024x424.png\" alt=\"\" class=\"wp-image-327\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x2-1024x424.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x2-300x124.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x2-768x318.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x2-1536x635.png 1536w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x2.png 1854w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"388\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x3-1024x388.png\" alt=\"\" class=\"wp-image-328\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x3-1024x388.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x3-300x114.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x3-768x291.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x3-1536x582.png 1536w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x3.png 1852w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"404\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x4-1024x404.png\" alt=\"\" class=\"wp-image-329\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x4-1024x404.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x4-300x118.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x4-768x303.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x4-1536x606.png 1536w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x4.png 1813w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"413\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x5-1024x413.png\" alt=\"\" class=\"wp-image-330\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x5-1024x413.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x5-300x121.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x5-768x309.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x5-1536x619.png 1536w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x5.png 1832w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"441\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x7-1024x441.png\" alt=\"\" class=\"wp-image-332\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x7-1024x441.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x7-300x129.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x7-768x331.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x7-1536x662.png 1536w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/x7.png 1886w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Setelah login menggunakan akun masing-masing, peserta memperoleh akses menuju berbagai menu pembelajaran, antara lain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Dashboard<\/li>\n\n\n\n<li>Download Virtual Machine<\/li>\n\n\n\n<li>Modul &amp; Materi<\/li>\n\n\n\n<li>Kurikulum<\/li>\n\n\n\n<li>Tools &amp; Operating System<\/li>\n\n\n\n<li>Server &amp; Status<\/li>\n\n\n\n<li>Informasi Umum<\/li>\n\n\n\n<li>Video &amp; Kelas<\/li>\n\n\n\n<li>Wordlist &amp; Payload<\/li>\n\n\n\n<li>Security Tools<\/li>\n\n\n\n<li>Webshell &amp; Analyzer<\/li>\n\n\n\n<li>OSINT &amp; Recon<\/li>\n\n\n\n<li>Modul &amp; Dokumen<\/li>\n\n\n\n<li>Template Pentest<\/li>\n\n\n\n<li>Komunitas<\/li>\n\n\n\n<li>CVE Database<\/li>\n\n\n\n<li>Forum<\/li>\n\n\n\n<li>WhatsApp Group<\/li>\n\n\n\n<li>Website<\/li>\n\n\n\n<li>Blog<\/li>\n\n\n\n<li>LinkedIn<\/li>\n\n\n\n<li>CVE List<\/li>\n\n\n\n<li>Cek Sertifikat<\/li>\n\n\n\n<li>Leaderboard<\/li>\n\n\n\n<li>CVSS Calculator<\/li>\n\n\n\n<li>Kontak Admin<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Dengan seluruh menu tersebut, peserta tidak perlu berpindah-pindah platform selama proses pembelajaran.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Download Virtual Machine<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Seluruh praktik bootcamp dilakukan menggunakan lab yang telah dipersiapkan.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Peserta memperoleh akses untuk mengunduh:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Lebih dari <strong>50 Virtual Machine<\/strong><\/li>\n\n\n\n<li>ISO pendukung<\/li>\n\n\n\n<li>Informasi konfigurasi VM<\/li>\n\n\n\n<li>Petunjuk penggunaan laboratorium<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Seluruh VM telah disiapkan dengan berbagai skenario kerentanan sehingga peserta dapat langsung melakukan praktik tanpa perlu membangun lab dari nol.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Modul &amp; Materi<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Dashboard menyediakan berbagai materi pendukung pembelajaran seperti:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Modul utama Bootcamp<\/li>\n\n\n\n<li>Modul lebih dari <strong>2.000 halaman<\/strong><\/li>\n\n\n\n<li>Modul Linux System Administration<\/li>\n\n\n\n<li>Modul Security<\/li>\n\n\n\n<li>Modul Mikrotik<\/li>\n\n\n\n<li>Modul Pendukung<\/li>\n\n\n\n<li>Panduan Ujian<\/li>\n\n\n\n<li>Silabus Bootcamp<\/li>\n\n\n\n<li>Kurikulum lengkap<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Semua materi dapat diakses kapan saja selama masa pembelajaran.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Video Pembelajaran<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Seluruh materi disampaikan melalui pembelajaran terstruktur sebanyak <strong>30 sesi\/pertemuan<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Selain kelas utama, peserta juga memperoleh akses menuju:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Premium Video X-code<\/li>\n\n\n\n<li>Malware Analysis<\/li>\n\n\n\n<li>Linux Hardening<\/li>\n\n\n\n<li>FreeBSD Hardening<\/li>\n\n\n\n<li>OWASP Top 10<\/li>\n\n\n\n<li>Slide Presentasi<\/li>\n\n\n\n<li>Video tambahan<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Seluruh video dapat diputar kembali sehingga peserta dapat mengulang materi kapan saja.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Tools &amp; Operating System<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Dashboard menyediakan berbagai software dan sistem operasi yang digunakan selama bootcamp, antara lain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Kali Linux<\/li>\n\n\n\n<li>Ubuntu Server<\/li>\n\n\n\n<li>FreeBSD<\/li>\n\n\n\n<li>VirtualBox<\/li>\n\n\n\n<li>VMware Player<\/li>\n\n\n\n<li>Nessus<\/li>\n\n\n\n<li>OWASP ZAP<\/li>\n\n\n\n<li>PuTTY<\/li>\n\n\n\n<li>Xray<\/li>\n\n\n\n<li>Program-program Pendukung Bootcamp yang sangat banyak<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Wordlist &amp; Payload<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Peserta memperoleh berbagai referensi payload dan wordlist seperti:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SQL Injection Payload<\/li>\n\n\n\n<li>XSS Payload<\/li>\n\n\n\n<li>LFI Payload<\/li>\n\n\n\n<li>PayloadsAllTheThings<\/li>\n\n\n\n<li>AwesomeXSS<\/li>\n\n\n\n<li>Wordlist Brute Force Indonesia<\/li>\n\n\n\n<li>Masih banyak lagi<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Security Tools<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Dashboard juga mengumpulkan berbagai tools penetration testing yang umum digunakan, misalnya:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Nuclei<\/li>\n\n\n\n<li>Nikto<\/li>\n\n\n\n<li>Subfinder<\/li>\n\n\n\n<li>WPScan<\/li>\n\n\n\n<li>Dalfox<\/li>\n\n\n\n<li>CMSeek<\/li>\n\n\n\n<li>httpx<\/li>\n\n\n\n<li>LFISuite<\/li>\n\n\n\n<li>LFiFreak<\/li>\n\n\n\n<li>Exploit-DB<\/li>\n\n\n\n<li>Mona<\/li>\n\n\n\n<li>Pwndbg<\/li>\n\n\n\n<li>dirsearch<\/li>\n\n\n\n<li>Brute XSS<\/li>\n\n\n\n<li>Masih banyak lagi<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Sehingga peserta tidak perlu mencari referensi tools satu per satu.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Webshell &amp; Malware Analysis<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Tersedia pula berbagai tools dan referensi untuk:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Webshell Analyzer<\/li>\n\n\n\n<li>PHP Shell Detector<\/li>\n\n\n\n<li>Malware Analysis<\/li>\n\n\n\n<li>PHP Shell<\/li>\n\n\n\n<li>Web Shell Detection<\/li>\n\n\n\n<li>PHP Shell yang sangat banyak<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">OSINT &amp; Recon<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Tahap reconnaissance didukung dengan berbagai referensi mengenai:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Information Gathering<\/li>\n\n\n\n<li>Reconnaissance<\/li>\n\n\n\n<li>Subdomain Enumeration<\/li>\n\n\n\n<li>Discovery Tools<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Modul &amp; Dokumen<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Dashboard juga menyediakan berbagai dokumen yang biasa digunakan dalam dunia profesional, antara lain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Wazuh SIEM<\/li>\n\n\n\n<li>Apache &amp; ModSecurity<\/li>\n\n\n\n<li>Ubuntu Auditd<\/li>\n\n\n\n<li>Subnetting<\/li>\n\n\n\n<li>Crack Hash Server<\/li>\n\n\n\n<li>reCAPTCHA Solver<\/li>\n\n\n\n<li>Template Laporan Pentest<\/li>\n\n\n\n<li>NDA Pentest<\/li>\n\n\n\n<li>Template Kontrak Pentest<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Informasi Umum<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Sebagai referensi tambahan, peserta memperoleh akses menuju:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>PTES Framework<\/li>\n\n\n\n<li>OWASP WSTG<\/li>\n\n\n\n<li>OWASP Top 10<\/li>\n\n\n\n<li>CVE Video List<\/li>\n\n\n\n<li>Statistik Sistem Operasi<\/li>\n\n\n\n<li>Leaderboard<\/li>\n\n\n\n<li>CVSS Calculator<\/li>\n\n\n\n<li>Cek Sertifikat<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Server &amp; Status<\/h1>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"744\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status1-1024x744.png\" alt=\"\" class=\"wp-image-333\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status1-1024x744.png 1024w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status1-300x218.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status1-768x558.png 768w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status1.png 1243w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"973\" height=\"879\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status2.png\" alt=\"\" class=\"wp-image-334\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status2.png 973w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status2-300x271.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status2-768x694.png 768w\" sizes=\"auto, (max-width: 973px) 100vw, 973px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"955\" height=\"310\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status3.png\" alt=\"\" class=\"wp-image-335\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status3.png 955w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status3-300x97.png 300w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/status3-768x249.png 768w\" sizes=\"auto, (max-width: 955px) 100vw, 955px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Di atas adalah sebagian server yang ditampilkan.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dashboard juga menyediakan monitoring layanan secara real-time, meliputi:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Status Server<\/li>\n\n\n\n<li>Status Lab Online<\/li>\n\n\n\n<li>Exam Server<\/li>\n\n\n\n<li>Login Proxmox<\/li>\n\n\n\n<li>Registrasi Ujian<\/li>\n\n\n\n<li>Monitoring Infrastruktur<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Komunitas<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Pembelajaran tidak berhenti setelah kelas selesai.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Peserta dapat bergabung ke:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Forum Cyber Security<\/li>\n\n\n\n<li>WhatsApp Group<\/li>\n\n\n\n<li>Website<\/li>\n\n\n\n<li>Blog<\/li>\n\n\n\n<li>LinkedIn<\/li>\n\n\n\n<li>Kontak Admin<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">untuk berdiskusi dengan mentor maupun sesama peserta.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Silabus Lengkap Materi X-code Training \u2013 Penetration Testing &amp; Cyber Security Engineer Bootcamp (30 Pertemuan)<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Materi pembelajaran:<\/strong><br><strong>Alur Penetration Testing Lengkap:<\/strong> Mulai dari <strong>pre-engagement, proposal, NDA, kontrak, eksekusi pentest, technical &amp; executive reporting, hingga presentasi hasil kepada klien dan manajemen bisnis<\/strong>. <strong>Web Exploitation:<\/strong> <strong>XSS, SQL Injection, SSRF, Command Injection, LFI\/RFI, Insecure Upload, Race Condition, Clickjacking, ClickFix (Reverse Shell via Social Engineering), Broken Authentication, IDOR, JWT Manipulation, Session Hijacking, Account Takeover (ATO).<\/strong> <strong>AI for Offensive Security:<\/strong> <strong>AI Agentic for Pentest<\/strong> dan <strong>AI for SIEM Wazuh.<\/strong> <strong>API Security Testing:<\/strong> Authentication Bypass, Input Validation Flaws, REST API Exploitation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Enterprise Offensive Security:<\/strong> <strong>Advanced Active Directory Attack, Golden Ticket, Cross-Domain Escalation, Parent-Child Trust Exploitation, Enterprise Admin Takeover, FreeIPA Exploitation.<\/strong> <strong>Exploit Development:<\/strong> <strong>Buffer Overflow, SEH, SafeSEH, DEP\/NX Bypass, ASLR Bypass, Egghunter, Fuzzing, Shellcode Development (Assembly), Custom Exploit Development (Python).<\/strong> <strong>Privilege Escalation:<\/strong> Linux, BSD, Kernel Exploitation, sudo &amp; polkit Misconfiguration. <strong>Malware Analysis:<\/strong> <strong>Static Analysis, Dynamic Analysis, Behaviour Analysis, Network Traffic Analysis, Reverse Engineering.<\/strong> <strong>Network &amp; Wireless Pentest:<\/strong> ARP Spoofing, Router Attack, IP Camera Exploitation, DoS, WEP\/WPA\/WPA2\/WPS, Evil Twin, Deauthentication, Hidden SSID Sniffing. <strong>Container &amp; Cloud Security:<\/strong> <strong>Container Escape (Docker)<\/strong> dan teknik eksploitasi modern. <strong>Defensive Engineering:<\/strong> <strong>Wazuh SIEM, ModSecurity WAF, Fail2ban, Honeypot, Firewall Hardening, Auditd, Rootkit Detection, Incident Response.<\/strong> <strong>Tools:<\/strong> <strong>Nessus, Metasploit, Wazuh, ModSecurity.<\/strong> <strong>Target Teknologi:<\/strong> <strong>PHP, Node.js, REST API, Active Directory, FreeIPA, Windows, Linux, BSD, Docker.<\/strong> <strong>Professional Growth:<\/strong> <strong>Portfolio Building, STAR Interview Method, Red Team, Blue Team, GRC, dan kemampuan menerjemahkan aspek teknis menjadi nilai bisnis.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Jika ikut magangnya juga, seperti apa dalam magang?<\/strong><br><strong>Di dalam magang<\/strong>, para pemagang <strong>tidak hanya belajar penetration testing<\/strong>, tetapi <strong>di SOC juga terjun langsung<\/strong> menggunakan <strong>tools &amp; sistem yang digunakan di industri IT modern saat ini<\/strong>. <strong>Akses nyata<\/strong> yang diberikan kepada pemagang untuk latihan kerja sebagai:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Pentester<\/strong><\/li>\n\n\n\n<li><strong>SOC L1<\/strong> dan <strong>SOC L2<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>SIEM Wazuh<\/strong> &#8211; Untuk <strong>analisis log keamanan<\/strong>, <strong>deteksi ancaman<\/strong>, &amp; <strong>memahami alur kerja Security Operations Center (SOC)<\/strong>, dengan tambahan <strong>SIEM Splunk<\/strong>. <strong>Grafana + Prometheus<\/strong> &#8211; Untuk <strong>visualisasi metrik<\/strong> dan <strong>alerting berbasis data<\/strong> dari sistem &amp; infrastruktur, selain itu juga akses ke <strong>Netdata<\/strong>, <strong>Zabbix<\/strong> &amp; <strong>Portainer<\/strong> milik PT. <strong>Proxmox VE<\/strong> &#8211; Untuk <strong>memantau &amp; mengelola VPS-VPS \/ Web Hosting<\/strong>. Program bootcamp terdiri dari <strong>30 sesi pembelajaran<\/strong> yang dirancang untuk membawa peserta dari tingkat fundamental hingga materi enterprise dan advanced offensive security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Materi mencakup:<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Penetration Testing Professional<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Alur penetration testing lengkap<\/li>\n\n\n\n<li>Pre-engagement<\/li>\n\n\n\n<li>Penyusunan proposal<\/li>\n\n\n\n<li>NDA<\/li>\n\n\n\n<li>Kontrak pentest<\/li>\n\n\n\n<li>Intelligence Gathering<\/li>\n\n\n\n<li>Threat Modeling<\/li>\n\n\n\n<li>Vulnerability Assessment<\/li>\n\n\n\n<li>Exploitation<\/li>\n\n\n\n<li>Post Exploitation<\/li>\n\n\n\n<li>Executive Summary<\/li>\n\n\n\n<li>Technical Report<\/li>\n\n\n\n<li>Presentasi kepada klien<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Web Exploitation<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>XSS<\/li>\n\n\n\n<li>SQL Injection<\/li>\n\n\n\n<li>LFI<\/li>\n\n\n\n<li>RFI<\/li>\n\n\n\n<li>SSRF<\/li>\n\n\n\n<li>CSRF<\/li>\n\n\n\n<li>Command Injection<\/li>\n\n\n\n<li>Clickjacking<\/li>\n\n\n\n<li>Race Condition<\/li>\n\n\n\n<li>ClickFix<\/li>\n\n\n\n<li>Reverse Shell<\/li>\n\n\n\n<li>Remote Code Execution<\/li>\n\n\n\n<li>Insecure Upload<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Broken Authentication &amp; Session Management<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cookie Theft<\/li>\n\n\n\n<li>Session Hijacking<\/li>\n\n\n\n<li>IDOR<\/li>\n\n\n\n<li>JWT<\/li>\n\n\n\n<li>Credential Stuffing<\/li>\n\n\n\n<li>Bypass 2FA<\/li>\n\n\n\n<li>Account Takeover<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">API Security<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>REST API<\/li>\n\n\n\n<li>Auth Bypass<\/li>\n\n\n\n<li>Input Validation<\/li>\n\n\n\n<li>API Fuzzing<\/li>\n\n\n\n<li>JWT<\/li>\n\n\n\n<li>API Exploitation<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">AI for Cyber Security<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>AI Agentic for Pentest<\/li>\n\n\n\n<li>AI untuk Analisis Kerentanan<\/li>\n\n\n\n<li>AI untuk Reporting<\/li>\n\n\n\n<li>AI untuk SIEM Wazuh<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">WAF Bypass<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SQLi Bypass<\/li>\n\n\n\n<li>XSS Bypass<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">SIEM &amp; SOC<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Instalasi Wazuh<\/li>\n\n\n\n<li>Monitoring<\/li>\n\n\n\n<li>Telegram Bot<\/li>\n\n\n\n<li>Incident Detection<\/li>\n\n\n\n<li>Log Analysis<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Secure Coding &amp; Incident Response<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Patch Management<\/li>\n\n\n\n<li>Bug Bounty Validation<\/li>\n\n\n\n<li>Rootkit Detection<\/li>\n\n\n\n<li>Backdoor Detection<\/li>\n\n\n\n<li>auditctl<\/li>\n\n\n\n<li>acct<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Exploit Development<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Buffer Overflow<\/li>\n\n\n\n<li>SEH<\/li>\n\n\n\n<li>SafeSEH<\/li>\n\n\n\n<li>DEP<\/li>\n\n\n\n<li>NX<\/li>\n\n\n\n<li>ASLR<\/li>\n\n\n\n<li>Egghunter<\/li>\n\n\n\n<li>Shellcode<\/li>\n\n\n\n<li>Assembly<\/li>\n\n\n\n<li>Python Exploit<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Network Attack<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>ARP Spoofing<\/li>\n\n\n\n<li>Router Attack<\/li>\n\n\n\n<li>Sniffing<\/li>\n\n\n\n<li>DoS<\/li>\n\n\n\n<li>IP Camera Attack<\/li>\n\n\n\n<li>Brute Force<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Wireless Pentesting<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>WEP<\/li>\n\n\n\n<li>WPA\/WPA2<\/li>\n\n\n\n<li>WPS<\/li>\n\n\n\n<li>Evil Twin<\/li>\n\n\n\n<li>Hidden SSID<\/li>\n\n\n\n<li>Deauthentication<\/li>\n\n\n\n<li>Jamming<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Enterprise Security<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Active Directory Attack<\/li>\n\n\n\n<li>Golden Ticket<\/li>\n\n\n\n<li>Kerberos<\/li>\n\n\n\n<li>Parent Child Trust<\/li>\n\n\n\n<li>Enterprise Admin Takeover<\/li>\n\n\n\n<li>Cross Domain Attack<\/li>\n\n\n\n<li>FreeIPA Exploitation<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Hardening<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>ModSecurity<\/li>\n\n\n\n<li>WAF<\/li>\n\n\n\n<li>Ubuntu Hardening<\/li>\n\n\n\n<li>Fail2ban<\/li>\n\n\n\n<li>Firewall<\/li>\n\n\n\n<li>Honeypot<\/li>\n\n\n\n<li>SSH Hardening<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Malware Analysis<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Static Analysis<\/li>\n\n\n\n<li>Dynamic Analysis<\/li>\n\n\n\n<li>Behaviour Analysis<\/li>\n\n\n\n<li>Reverse Engineering<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Container Security<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Docker<\/li>\n\n\n\n<li>Container Escape<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Mobile Application Security<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Static Analysis<\/li>\n\n\n\n<li>Dynamic Analysis<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">CMS &amp; Web Server Exploitation<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>WordPress<\/li>\n\n\n\n<li>Node.js<\/li>\n\n\n\n<li>PHP<\/li>\n\n\n\n<li>Popular CMS Core RCE<\/li>\n\n\n\n<li>Web Server RCE<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">OWASP Top 10 2025<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Seluruh kategori dipelajari beserta teknik eksploitasi, mitigasi, dan secure coding.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Professional Growth<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>STAR Interview<\/li>\n\n\n\n<li>Portfolio<\/li>\n\n\n\n<li>Red Team<\/li>\n\n\n\n<li>Blue Team<\/li>\n\n\n\n<li>GRC<\/li>\n\n\n\n<li>Soft Skill<\/li>\n\n\n\n<li>Business Communication<\/li>\n\n\n\n<li><\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Enterprise Lab &amp; Exam<\/h1>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"505\" height=\"437\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/labumum.png\" alt=\"\" class=\"wp-image-347\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/labumum.png 505w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/labumum-300x260.png 300w\" sizes=\"auto, (max-width: 505px) 100vw, 505px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Peserta memperoleh akses ke laboratorium yang menyerupai lingkungan perusahaan untuk praktik langsung, meliputi:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Website PHP &amp; Node.js.<\/li>\n\n\n\n<li>API Lab.<\/li>\n\n\n\n<li>Windows Server.<\/li>\n\n\n\n<li>Linux Server.<\/li>\n\n\n\n<li>Active Directory multi-domain.<\/li>\n\n\n\n<li>FreeIPA.<\/li>\n\n\n\n<li>Wireless Lab.<\/li>\n\n\n\n<li>Malware Analysis Lab.<\/li>\n\n\n\n<li>SIEM Lab (Wazuh &amp; Splunk).<\/li>\n\n\n\n<li>Docker &amp; Container Security Lab.<\/li>\n\n\n\n<li>Proxmox Virtual Environment.<\/li>\n\n\n\n<li>Simulasi exploit chain, lateral movement, privilege escalation, hingga pivoting pada jaringan enterprise.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><small>Kami mengadopsi teknologi terkini yang digunakan pada lingkungan enterprise modern, termasuk AI, otomatisasi VPS, Docker, Proxmox, dan MicroCloud dari Canonical dengan dukungan 3-node LXD Cluster dengan storage terdistribusi berbasis Ceph RBD dan CephFS yang menyediakan replikasi data, high availability, serta skalabilitas tinggi.<\/small><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Akses Browser Instan, Kemampuan Kelas Enterprise<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Akses VPS dapat dilakukan langsung melalui browser tanpa perlu instalasi tambahan. <strong>Dukungan SSH Tunnel<\/strong> memungkinkan penggunaan berbagai tools dari PC\/laptop kamu, seperti <strong>Burp Suite<\/strong>, sehingga lebih fleksibel dan powerful dibandingkan web shell konvensional. Selain terminal (CLI), <strong>peserta juga mendapatkan akses GUI penuh pada Windows dan Kali Linux<\/strong> untuk materi lebih lanjut.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Skenario serangan multi-layer yang melibatkan teknik tingkat lanjut<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Setiap peserta mendapatkan akses ke infrastruktur <strong>multi-VPS<\/strong> yang dirancang untuk mendukung simulasi skenario <strong>serangan multi-layer dengan teknik-teknik tingkat lanjut<\/strong>. Cakupan materi meliputi Advanced Web Exploitation, Exploit Chaining, Active Directory (AD), FreeIPA, Exploit Development, serta berbagai ujian keamanan siber lanjutan lainnya.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Baremetal &amp; Multi-OS (Ubuntu, Debian, Rocky Linux, Kali Linux dan Windows 10)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Laboratorium tangguh berbasis Linux &amp; Windows yang ditenagai oleh Dedicated Server Proxmox dan Ubuntu Server. Teknologi paling muktahir di dunia saat ini dengan melibatkan ekosistem canggih MicroCloud Canonical, melibatkan <strong>interkoneksi database terdistribusi 3-Node LXD Cluster dengan replikasi storage Ceph RBD\/CephFS<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Each participant uses 4-5 VPS for the Enterprise Cyber Range.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Self-built cloud automation technology, developed from scratch since 2020<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/1.png\" alt=\"Preview infrastruktur 1\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/2.png\" alt=\"Preview infrastruktur 2\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/3.png\" alt=\"Preview infrastruktur 3\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/4.png\" alt=\"Preview infrastruktur 4\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/5.png\" alt=\"Preview infrastruktur 5\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/6.png\" alt=\"Preview infrastruktur 6\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/7x.png\" alt=\"Preview infrastruktur 7\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/cyberrange100.png\" alt=\"Preview infrastruktur 8\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/cyberrange200.png\" alt=\"Preview infrastruktur 9\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Kami memiliki pengalaman lebih dari 22 tahun di bidang keamanan siber (cyber security) dan lebih dari 5 tahun dalam penyediaan layanan cloud.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Docker, Proxmox, and Canonical MicroCloud technologies with 3x Ceph replication<br>AI Agent technology to assist in monitoring and managing the Enterprise Cyber Range<br>All servers are located in a Data Center with dozens of our own bare-metal servers, not hosted elsewhere<br>The servers used for the Enterprise Cyber Range utilize Intel Xeon, Intel Core i7, and AMD Ryzen 9 processors<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 01<br>Basic &amp; Advanced Web Security Lab (10 Vulnerability Stages)<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/ujian1.png\" alt=\"Preview Exam 01\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Ujian komprehensif 10 tahapan kerentanan aplikasi web terintegrasi di dalam lingkungan. Seluruh tantangan wajib diselesaikan bertahap. Server peserta menggunakan VPS Proxmox.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kerentanan yang Wajib Ditembus:<br>Local File Inclusion (LFI)<br>Local File Inclusion (LFI) on API<br>Insecure Direct Object Reference (IDOR)<br>Advanced IDOR Exploration<br>Basic SQL Injection<br>Advanced SQL Injection<br>SQL Injection on API<br>Brute Force Attack Using Provided Wordlist<br>Logic-Based Brute Force Attack Without Wordlist<br>Server-Side Request Forgery (SSRF)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 02<br>Enterprise Cyber Range (Full Penetration)<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/ujian2.png\" alt=\"Preview Exam 02\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Simulasi penetrasi jaringan dunia nyata dengan subnet multi-layer tersegregasi. Di sini, peserta ditantang untuk mengeksekusi rangkaian taktik eksploitasi tingkat tinggi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Target Operasi Jaringan:<br>Initial Access &amp; Foothold pada Network Terbatas<br>Exploit Chaining (Multi-step Exploitation)<br>Network Pivoting Antar Subnet<br>Lateral Movement Antar Host<br>Privilege Escalation Sampai Root Access<br>Web \/ Service Exploitation pada Linux Server<br>Internal Host Enumeration &amp; Discovery<br>Access Control Bypass (Whitelist Filtering Scenario)<br>Red Team Shell Access Objective<br>Logically Segmented Network Traversal (Router-based Restrictions)<br>Cryptography Challenge (di VPS Red Team Environment)<br>Linux Application Reverse Engineering<br>Internal Infrastructure Exploitation Lab Tasks<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 03<br>Full-Stack Offensive Security &amp; Cloud-Native Escape<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/ujian3.png\" alt=\"Preview Exam 03\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This environment utilizes an Enterprise-Grade Cyber Range designed to replicate the complexities of a modern distributed network ecosystem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tantangan Cloud-Native:<br>HTTP Header Manipulation<br>WiFi Password Cracking (WPA2 Handshake)<br>Mobile Application Security: Static and Dynamic APK Analysis for Login Bypass<br>JWT Retrieval from API to Application Flaw<br>Popular CMS Core RCE into Remote Shell<br>Web Server RCE into Remote Shell<br>From CVE-2026 to Host: Container Escape Chain (Ubuntu Server 24.04.4)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 04<br>Active Directory Attack Chain (Full-Chain Domain Compromise)<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/ad1.png\" alt=\"Preview Active Directory 1\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/ad2.png\" alt=\"Preview Active Directory 2\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Simulasi serangan berskala besar di infrastruktur korporasi terpusat berbasis Windows Active Directory. Anda dituntut menguasai taktik kompromi domain penuh secara persisten, mulai dari eksploitasi workstation awal hingga pengambilalihan kontrol penuh domain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phase 1: Initial Access &amp; Foothold Establishment<br>Workstation Control &amp; Environment Preparation<br>Exploitation of Windows<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phase 2: Identity Mapping<br>Whoami Identity Verification<br>Local &amp; Domain Security Identifier (SID) Analytics<br>Relative Identifier (RID) Mapping<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phase 3: Database Extraction (The Source)<br>Non-Interactive Credential Database Dumping<br>Automated SAM &amp; LSA Secret Extraction<br>Cryptographic Material Harvesting<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phase 4: Operational Base Expansion &amp; Ticket Forging<br>In-Memory Kerberos Ticket Injection<br>Standardized Authentication Protocol Alignment<br>Operational Base Expansion (The Pivot)<br>Remote File System Enumeration via UNC Paths<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 05<br>The Final Boss: Infrastructure Doomsday (Cross-Domain Trust)<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/child1.png\" alt=\"Preview Cross-Domain Trust 1\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/child2.png\" alt=\"Preview Cross-Domain Trust 2\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Skenario kehancuran infrastruktur total (Infrastructure Doomsday). Mengambil alih hak tertinggi Enterprise Admin melalui eksploitasi hubungan kepercayaan antar-domain sekunder menuju induk root forest.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Expert Objective:<br>Cross-Domain Escalation (Expert Level)<br>Golden Ticket Attack<br>Cross-Node Security Identifier (SID) Harvesting (ExtraSID)<br>Parent-Child Trust Exploitation<br>Enterprise Admin Takeover<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 06<br>Enterprise Identity Security: FreeIPA Linux Domain Takeover<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/freeipa.png\" alt=\"Preview FreeIPA\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Mengambil alih manajemen identitas terpusat berskala besar berbasis sistem operasi Linux enterprise menggunakan manajemen FreeIPA Controller.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Target Operasi:<br>Target Scanning and Enumeration on FreeIPA<br>Exploiting FreeIPA to Obtain Administrative Credentials<br>DNS Manipulation to Enable FreeIPA Web Interface Access<br>Objective: Gain Full Access to the Target Portal (ipa.ctf-lab.local)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 07<br>Windows 10 Malware Behavior Analysis (Static &amp; Dynamic)<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/malware.png\" alt=\"Preview Malware Analysis\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Melakukan bedah mendalam perilaku malware pada OS Windows 10 menggunakan metode statis biner maupun analisis dinamis interaktif real-time di memori RAM menggunakan OllyDbg.<br>Executing Malware in an Isolated Windows Environment for Real-Time Behavior Observation<br>Comparing Registry Snapshots via Regshot to Detect Persistence Mechanisms and Shellcode Activity<br>Capturing Traffic Using Wireshark to Analyze Network Indicators<br>Performing Static Disassembly in OllyDbg to Extract Administrative Access Codes<br>Leveraging Retrieved Administrative Credentials to Intercept and Execute Privileged Functions at Runtime<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 08<br>Windows 10 Exploit Development (Memory Corruption)<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/windowsexploit.png\" alt=\"Preview Windows Exploit Development\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Pengembangan exploit orisinal di arsitektur Windows 10 modern dengan memanipulasi alur eksekusi memori lewat teknik Buffer Overflow, bypass proteksi SafeSEH, dan mitigasi ASLR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Target Operasi:<br>Analyzing Input Security and HTTP Protocol Structure on Windows 10 Applications<br>Developing Socket-Based Fuzzer Programs for HTTP Input Testing<br>Analyzing Fuzzer Responses on the SEH Chain for Memory Vulnerability Validation<br>Generating Unique Character Patterns (Pattern Create) for Buffer Boundary Identification<br>Executing Programs and Monitoring Register Values \/ Memory Flow<br>Calculating Byte Distance to the SEH Chain Using the Pattern Offset Method<br>Evaluating Application Environment Mitigation Controls (SafeSEH and ASLR)<br>Extracting Execution Control Pointers for Structural Alignment<br>Developing Bypasses for SafeSEH and ASLR Protections via Vector Alignment<br>Constructing Padding Buffers as a Memory Execution Transition Space<br>Crafting Initial Payloads Using Baseline Shellcode for Target Verification<br>Developing Advanced Payloads by Replacing Core Shellcode for Persistent Access<br>Executing the Final Payload via HTTP Requests to Verify Successful Memory Exploitation<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 09<br>Linux Exploit Development &amp; Bind Shell Execution<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/linuxexploit.png\" alt=\"Preview Linux Exploit Development\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Mengidentifikasi threshold korupsi data biner Linux via fuzzer, mengubah arah logical flow instruksi register pointer, dan menanamkan payload Bind Shell interaktif.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Target Operasi:<br>Conducting Initial Fuzzing and Input Testing to Trigger Binary Crashes<br>Analyzing System Core Dumps via GDB to Inspect Memory Register States<br>Calculating Exact Offset Distances to Identify Target Instruction Pointer Coordinates<br>Extracting Stack Memory Address Targets to Verify Reliable Code Redirection<br>Constructing Buffer Payloads Using NOP Sleds for Stack Structural Alignment<br>Integrating Custom Executable Shellcode for Memory Privilege Control<br>Injecting Final Payloads via System Environment Vectors to Achieve Interactive Shell Access<br>Deploying Bind Shell Components to Listen on Dedicated Network Ports (Port 11111)<br>Utilizing Netcat to Establish Remote Connections and Verify Full Interactive Control<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 10<br>Shared Web Hosting (Bypass Disable Function)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 11<br>WordPress &#8211; Ethical Hacking<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"407\" height=\"332\" src=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/spx.png\" alt=\"\" class=\"wp-image-346\" srcset=\"https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/spx.png 407w, https:\/\/masterkurniawan.my.id\/wp-content\/uploads\/2026\/07\/spx-300x245.png 300w\" sizes=\"auto, (max-width: 407px) 100vw, 407px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Target Operasi:<br>WordPress Core Vulnerability Identification<br>Plugin &amp; Theme Security Assessment<br>Ethical Hacking Principles &amp; Responsible Disclosure<br>Objective: Access Target Flag at \/mnt\/flag.txt<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">EXAM 12<br>Web Exploitation &amp; Local Privilege Escalation (Ubuntu Server 26.04)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Target Operasi:<br>Web Vulnerability Exploitation to Obtain PHP Shell<br>Reverse Shell Upgrade for Interactive Session Control<br>System Analysis &amp; Enumeration for Privilege Escalation Vectors<br>CVE-Based Local Privilege Escalation on Ubuntu Server 26.04 LTS<br>Full Root Access &amp; Flag Retrieval<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>AI Agent Technology for Enterprise Cyber Range<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our AI technology delivers real-time multi-server monitoring and secure remote management<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Teknologi AI untuk memantau puluhan server dan ribuan VPS data center kami, termasuk untuk memantau dan membantu mengelola Enterprise Cyber Range.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/ai1.png\" alt=\"Preview AI Monitoring 1\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcode.or.id\/cyberrange\/ai2x.png\" alt=\"Preview AI Monitoring 2\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Carolina AI Agent mampu memantau puluhan server baremetal dan ribuan VPS di Data Center X-code (PT. Teknologi Server Indonesia) dengan pemeriksaan melalui IP publik maupun IP private secara real-time.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Program Magang Industri<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Peserta yang mengikuti program magang akan mendapatkan pengalaman menggunakan teknologi yang umum dipakai di industri, tidak hanya sebagai Penetration Tester tetapi juga sebagai bagian dari Security Operations Center (SOC).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Selama magang, peserta memperoleh kesempatan untuk berlatih sebagai:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Penetration Tester<\/strong>, mulai dari information gathering, vulnerability assessment, validasi manual, eksploitasi, hingga penyusunan laporan profesional.<\/li>\n\n\n\n<li><strong>SOC Analyst Level 1<\/strong>, dengan fokus pada monitoring log, triase alert, identifikasi ancaman, dan analisis awal insiden keamanan.<\/li>\n\n\n\n<li><strong>SOC Analyst Level 2<\/strong>, yang mencakup investigasi lebih mendalam, korelasi log,  penanganan insiden, dan eskalasi kasus.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Pemagang juga menggunakan berbagai platform yang lazim digunakan di lingkungan enterprise, antara lain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>SIEM:<\/strong> Wazuh dan Splunk.<\/li>\n\n\n\n<li><strong>Monitoring &amp; Observability:<\/strong> Grafana, Prometheus, Netdata, dan Zabbix.<\/li>\n\n\n\n<li><strong>Manajemen Container:<\/strong> Portainer.<\/li>\n\n\n\n<li><strong>Virtualisasi &amp; Infrastruktur:<\/strong> Proxmox VE untuk pengelolaan VPS, web hosting, dan laboratorium virtual.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Dengan kombinasi <strong>dashboard terintegrasi<\/strong>, <strong>30 sesi pembelajaran<\/strong>, <strong>laboratorium enterprise<\/strong>, dan <strong>program magang berbasis praktik industri<\/strong>, peserta memperoleh pengalaman belajar yang dirancang agar mendekati kondisi kerja nyata di bidang Penetration Testing dan Cyber Security Engineering.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/hackerbootcamp.asia\/bootcamppentestcybersecurityengineerv8.pdf\">Download silabus Bootcamp<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/hackerbootcamp.asia\/cybersecuritylab2026v10.pdf\">Download lab <\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/hackerbootcamp.asia\">https:\/\/hackerbootcamp.asia<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dalam sebuah bootcamp cyber security, materi pembelajaran yang baik perlu didukung oleh platform yang mampu mengelola seluruh proses belajar secara terintegrasi. Oleh karena itu, X-code mengembangkan Dashboard HackerBootcamp sebagai pusat aktivitas peserta selama mengikuti program Penetration Testing &amp; Cyber Security Engineer Bootcamp. Dashboard ini tidak hanya berfungsi sebagai Learning Management System (LMS), tetapi juga sebagai &#8230; <a title=\"Dashboard Bootcamp X-code (HackerBootcamp.asia): Platform Pembelajaran Cyber Security Terintegrasi\" class=\"read-more\" href=\"https:\/\/masterkurniawan.my.id\/index.php\/2026\/07\/27\/dashboard-bootcamp-x-code-hackerbootcamp-asia-platform-pembelajaran-cyber-security-terintegrasi\/\" aria-label=\"Baca selengkapnya tentang Dashboard Bootcamp X-code (HackerBootcamp.asia): Platform Pembelajaran Cyber Security Terintegrasi\">Baca Selengkapnya<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,7,4],"tags":[],"class_list":["post-324","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-ethical-hacking","category-wazuh"],"_links":{"self":[{"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/posts\/324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/comments?post=324"}],"version-history":[{"count":12,"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/posts\/324\/revisions"}],"predecessor-version":[{"id":354,"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/posts\/324\/revisions\/354"}],"wp:attachment":[{"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/media?parent=324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/categories?post=324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/masterkurniawan.my.id\/index.php\/wp-json\/wp\/v2\/tags?post=324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}