Nov 15, 2025 · 7 min read · What is Enumeration? It is one of the most important parts of Penetration Testing process. It is identifying all of the ways we could attack a target. We must do our best in this phase. Long story short - enumeration is collecting as much information...
Join discussion
Oct 20, 2025 · 4 min read · Transferring files During any penetration testing exercise, it is likely that we will need to transfer files to the remote server. There are few options for this: One method is running a Python HTTP server on our machine and then using wget or cUR...
Join discussion
Oct 15, 2025 · 2 min read · Privilege Escalation Once we gain initial access to a box, we want to thoroughly enumerate the box to find any potential vulnerabilities we can exploit to achieve a higher privilege level. There are checklists for privilege escalation online. A goo...
Join discussion
Oct 9, 2025 · 2 min read · Some good note taking options Notepad++ GitBook (has fetures to host a page or make wiki page) Cherrytree Evernote Sublime Text Notion Visual Studio Code It is important to make sure that any client data is only stored locally and not synced...
Join discussion
Sep 30, 2025 · 5 min read · Proof of Concept Proof of Concept (PoC) or Proof of Principle is a project management term. In project management, it serves as proof that a project is feasible in principle. We confirm discovered vulnerabilities. We prepare steps that shows the vu...
Join discussion
Sep 30, 2025 · 4 min read · After pre-engagement phase is completed, information gathering begins. It’s a phase where we gather all available information about the company. This is the phase which we return to multiple times. OSINT Open source intelligence is a great way to gat...
Join discussion
Aug 9, 2025 · 11 min read · If you're into pentesting, cyber security, or just a tech person curious about cyberspace, you’ve probably come across OffSec’s OSCP or Hack The Box’s CPTS. I want to share my thoughts and experiences with both certifications - how they felt, how I p...
Join discussion
Jul 22, 2025 · 4 min read · This write-up details the steps taken during a Live Engagement from the Shells & Payloads module in the HTB Pentester Job Role Path. Question 1: What is the hostname of Host-1? (Format: all lower case) To find the hostname of Host-1, an Nmap scan wa...
Join discussion
Jun 1, 2025 · 4 min read · Introduction This module covered the fundamentals of Linux. I needed to understand the Linux architecture as it is an important aspect in the field of cybersecurity. Through this module, I covered the history of Linux, directory structure, navigation...
Join discussionMar 7, 2025 · 4 min read · Introduction I just receive my certificate few days ago - after 2 weeks of waiting. In this article, i will go through two main areas: the Leaning Process, and my experience with the main exam. HTB CPTS Overview HTB Certified Penetration Testing Spe...
KNhật commented