Sep 22, 2025 · 2 min read · When learning penetration testing, it’s tempting to just dump scan results and call it a day. But real reconnaissance isn’t about collecting noise, it’s about telling the story of what matters, why it matters, and what risks it creates. As part of my...
Join discussion
Jul 21, 2025 · 3 min read · Scenario To complete the skills assessment, answer the questions below. You will need to apply a variety of skills learned in this module, including: Using whois Analysing robots.txt Performing subdomain bruteforcing Crawling and analysing result...
Join discussion
Apr 24, 2025 · 5 min read · When you’re doing a penetration test, your first job is to understand the target. Before you touch a single exploit or send a single payload, you need to know what services are running, what ports are open, what technologies are in play, and where th...
Join discussion
Mar 31, 2025 · 9 min read · Publicly Available Data Before starting any network enumeration and analysis, it’s important to first understand the company or organization you’re looking at. This helps make sure your analysis is focused and relevant. A good first step is to collec...
Join discussionJan 11, 2025 · 2 min read · Question 1 This tells search engines what to and what not to avoid. We have to use the robots.txt file on the website to find what the website owner wants search engines to crawl and what to avoid. Within the robots.txt file is our first flag. Ques...
Join discussionJan 4, 2025 · 5 min read · Passive Reconnaissance Passive information gathering involves gathering as much information as possible without actively engaging with the target system. Host Command The host command is a DNS lookup utility. If more than one IP address comes up, th...
Join discussionDec 13, 2024 · 10 min read · In the context of Bug Bounty or security testing, information gathering is a step that involves collecting as much data as possible about a target. The goal is to better understand its environment and, above all, identify potential vulnerabilities. T...
Join discussion
Dec 12, 2024 · 8 min read · Nmap Basic Port Scans INTRODUCTION The next step would be checking which ports are open and listening and which ports are closed. Therefore, in this room and the next one, we focus on port scanning and the different types of port scans used by nmap. ...
Join discussion
Nov 25, 2024 · 4 min read · The Search Skills room is designed to help you develop efficient Internet searching techniques. Knowing how to locate relevant and accurate information is critical in cybersecurity. This room covers essential skills such as evaluating search results,...
Join discussion
Nov 19, 2024 · 11 min read · Dans un contexte de BugBounty ou de test de sécurité, la collecte d’informations est une étape qui consiste à recueillir un maximun de données sur une cible. Le but est de mieux comprendre son environnement et surtout identifier des vulnérabilités po...
Join discussion