After completing the eJPT course, it was time to follow the next course. I was not sure which course I would like to start with. I had to courses in mind, the eCPPT and the eWPT course. Getting ce...

It was a while back that I was hacking a machine on HTB because it was quite busy lately. Today I was a little more relaxed so I could spend some time on HTB. I saw a Windows machine “Return” which...

Getting certified as eJPT Since the end of 2019 I’m working as a security professional and before I started in security I did not get any security certificate. In 2020 I started to following diffe...

A few weeks ago I had read an article on hakin9 about an open source vulnerability reporting tool called PeTeReport. Lately I’ve had my priorities on other things than looking into PeTeReport. And ...

In my CSSLP training a few months ago, a topic came up about a risk traceability matrix. Something I remembered, is that I was used to use something like this as a test consultant for risk based te...

According (ISC)² the CSSLP is ideal for software development and security professionals responsible for applying best practices to each phase of the SDLC. For years I am working in software develop...

I phish you a Merry Xmas Short and dark days, the end of the year is insight. With December as the last month, we still have some fun holidays ahead of us. Sinterklaas has just left the country a...

IT Security Labs has created a new OSCP like vulnerable Windows machine. I downloaded the machine and imported it into my pentest lab environment. It is practice time! Let’s have some fun while ha...

Years ago I automated some work in MS Excel with VBA. Sometimes I decided to protect the source code with a password. A password that later turns out not to provide sufficient protection for the f...

Through a forum post I found out that a PenTest+ (PT0-002) Beta exam could be done for 50 US Dollars. The moment the Beta exam was opened, I registered immediately. And started the journey for me t...