This talk aims to explore some of the most common cyberattacks and demonstrate how vulnerabilities are exploited. Using a simple experimental setup consisting of two virtual machines—a “victim” and an “attacker”—practical examples of these attacks will be presented. The talk will outline key phases of a cyberattack, including reconnaissance, exploitation, and post-exploitation activities. Each phase will be illustrated through practical demonstrations, showing how attackers identify targets, exploit vulnerabilities, and maintain access. Defensive strategies and countermeasures for each phase will also be discussed. The session will conclude with key insights and awareness about offensive and defensive strategies, offering practical advice for improving cybersecurity in real-world scenarios.