This competition started at noon on 1/30/20 and ran for 4 days until 2/3/2020. There were a total of 18 flags and a grand prize of $500 with a 1 year pro HTB subscription. My team of 4, which I pulled from a local meetup (Nova Hackers) and random people from the Metasploit CTF chat […]
How the CISSP changed my Linkedin Views
Just for those who are curious about what kind of changes they should expect on their Linkedin views and messages after getting the CISSP.. This is a short blog post about how it impacted mine. Being in InfoSec, as long as you’ve got some experience under your belt, recruiters will definitely reach out to you, […]
Certified Information Systems Security Professional (CISSP) Certification
Passed the CISSP on my first attempt in mid-July, 2019, and finally getting around to writing about it now. Summary of exam: My exam was 100 questions, although it can go up to 150 based on how you are doing on the exam.. its kind of variable so I think if it knows you are […]
Hackthebox – Ypuffy Writeup
This is a write-up for the Ypuffy machine on hackthebox.eu which was retired on 2/9/19! Step 1: Enumeration Like usual, let’s start with a quick nmap to see what ports are open: nmap -sC -sV -oA nmap1.txt -Pn 10.10.10.107 First we attempt to browse to port 80 like usual, but we get a “the connection […]
Offensive Security Certified Professional (OSCP) Certification
Just passed my OSCP this weekend, successfully hacking into all five boxes that were presented! Summary of exam: This exam is a great way to prove your penetration testing skills and a great one to add to your resume. It is a 24-hour exam (although you don’t need to use the whole time) and it […]
Hackthebox – SecNotes Writeup
This is a write-up for the Secnotes machine on hackthebox.eu which was retired on 1/19/19! Summary Secnotes is a medium difficulty Windows machine which will help you practice some basic SQL injection, explore SMBclient, and use some simple php scripting. Enumeration As always, our first step is enumeration. We use the following command in nmap […]
Tracking File Deletions on Windows
If you are suspecting a user, process, virus, malware, or hacker deleting your files, you don’t have to buy expensive software to track what is deleting files. You can keep track of anything that deleted your files using Windows auditing. You need to have Windows Professional or better (Home will not work) to use this […]
Hackthebox – Waldo Writeup
This is a write-up for the Waldo machine on hackthebox.eu which was retired on 12/15/18! Step 1: enumerate! Run an automated scan with this script: https://github.com/vishalb2308/Pentest-Enumeration-Script/blob/master/EnumScript.py or something like: nmap -sC -sV -oA /tmp/nmap1.txt -Pn 10.10.10.87 Which should result in something like this: We type in 10.10.10.87 in the browser and this shows up: At […]
Hackthebox – Jerry Writeup
This is a write-up for the Jerry machine on hackthebox.eu which was retired on 11/17/18! First we start with a nmap scan: map -sC -sV -Pn 10.10.10.95 8080 is open: 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_http-favicon: Apache Tomcat |_http-server-header: Apache-Coyote/1.1 |_http-title: Apache Tomcat/7.0.88 We go to the page by going to http://10.10.10.95:8080 […]
Hackthebox – Bounty Writeup
This is a writeup for the Bounty machine on hackthebox.eu which was retired on 10/27/18! We first enumerate ports with: nmap -sC -sV -Pn 10.10.10.93 Port 80 is open so we go to it and it shows a wizard, nice. We look around the site and find that the server is Microsoft-IIS/7.5 but that’s not […]