Getting back into the swing of things takes time, and one machine isn’t enough to fully get rid of the rust. That is why I didn’t waste any time and selected my second target on HackMyVM: a Windows...

It’s been quite a while since I last worked with computers on hacking vulnerable machines. Recently, I got my hands on a new machine that I can use for CTFs. Everything feels a bit rusty since I ha...

In the world of cybersecurity, the red team plays a crucial role in simulating attacks to identify vulnerabilities within an organization. One of the most critical tasks for these ethical hackers ...

You’ve discovered a web vulnerability, now comes the exciting part: crafting a proof of concept (POC) to demonstrate its exploitability! With the right tips and tricks at your disposal, you can str...

Today I had some time left to hack a simple machine. After looking quickly on HTB I found a machine that might be fun. Cicada is an easy Windows Active Directory machine that serves as an excellent...

PEN300 also known as OSEP is a course not just about learning the technical skills of penetration testing; it’s a deep dive into the complexities of cybersecurity that pushes you to think criticall...

The Hack The Box “Forest” vulnerable machine is an exceptional resource for cybersecurity enthusiasts, particularly those preparing for certifications like OSCP and OSEP. This machine has setup an ...

In today’s digital landscape, APIs (Application Programming Interfaces) are very important in modern websites and applications. They facilitate seamless communication between different software sys...

It took a while before I posted something on my blog again. This was partly because after obtaining OSWA, I fully committed myself to OSEP in addition to my work and a holiday was planned. Currentl...

Last week I did pass the OffSec Web Assessor (OSWA) exam from Offsec. This is a hands-on exam and is 23 hours and 45 minutes long before the lab time ends. In the next 24 hours you have to deliver ...