1. Black Box (Misc) Description A drive image recovered from a failed extraction. The operative who was carrying it didn’t make it out. The image did. Whatever was being prepared for transpor...
This guide will help you establish a connection between your Android Studio Emulator running on Windows and your Kali Linux environment. This setup is ideal for mobile penetration testing, especial...
Passed INE eWPTXv3 in 7 hours (out of 18). Lab reset once. No XXE or SSTI. Strong emphasis on JWT, SQLi, NoSQLi, deserialization, and CVE exploitation. Below: exam details, my preparation method, a...
Nmap Scan I started by running a full TCP scan on the target using: sudo nmap 10.10.11.74 -T4 -A -open -p- I mapped the domain to the IP in /etc/hosts and discovered a file upload feature accept...
Nmap Scan I started with a full port scan: sudo nmap 10.10.11.83 -T4 -A -open -p- the scan showed a web server running on port 80. There’s a login page and on it, I found an email: jeremy@previo...
Nmap Scan I started by running a full TCP scan on the target using: sudo nmap 10.10.11.87 -T4 -A -open -p- Surprisingly, this didn’t reveal much, so I decided to focus on specific protocols inst...
Machine Information As is common in real life Windows pentests, you will start the TombWatcher box with credentials for the following account: henry / H3nry_987TGV! $User_flag Nmap Scan sudo nmap...
OS: Windows Difficulty: Easy Machine: Active Released: 24/05/2025 Machine Information As is common in real life Windows pentests, you will start the Fluffy box with credentials for the foll...
Process Let’s say your target is example.com. You begin with some Google dorking using simple queries, but nothing interesting comes up. After the initial Google Dorking yielded no interesting res...
Process One evening, I was exploring the internet like a digital detective, using a Shodan to hunt for hidden clues. Suddenly, I found an open window into a system—a website spilling sensitive inf...