Walkthroughs
Lab write-ups, attack paths and preparation notes for offensive security certifications.
-
Burp Suite for OSWE Preparation: Beyond the Scanner
Burp Suite for OSWE preparation is a manual discipline, not a scanning job. The active scanner is black-box, Professional-only and blind to…
-
Active Directory Enumeration Cheat Sheet: Exam Workflow
An active directory enumeration cheat sheet lists commands. Passing a timed exam means chaining those commands into a workflow that survives defensive…
-
CPTS Flag 8&9: Enumeration, Pivoting and Troubleshooting Guide
CPTS Flag 8&9 is a search term associated with the challenging middle stages of the Hack The Box Certified Penetration Testing Specialist…
-
Linux Privilege Escalation Checklist for Timed Exams
Most Linux privilege escalation checklists fail in timed exams because they prioritize volume over velocity. Candidates drown in enumeration data while the…
-
OSCP Buffer Overflow Walkthrough: Repeatable Methodology
An OSCP buffer overflow walkthrough that relies on memorized Vulnserver offsets fails the moment an exam machine uses a different buffer size,…
-
Windows Privilege Escalation Checklist for Exam Day Triage
Your shell is unstable, the clock is ticking, and a generic windows privilege escalation checklist is burning time you don’t have. Running…
-
NetExec SMB Enumeration Guide: Commands That Find Results
You’ve got forty minutes left in the exam window and no clear path on the target host. Running through a netexec smb…
-
OSCP Vs CPTS: Which Certification Should You Sit First?
You are stuck deciding between OSCP and CPTS because both claim to validate penetration testing skills, but they test different competencies under…
-
OffSec Employee: m.hayes, Anonymous FTP, SAM and WinRM Attack Path
OffSec Employee is a Windows machine where a simple service-enumeration mistake—anonymous access to an FTP server—exposes sensitive Windows registry backups and creates…
