This is a very easy web-focused VM, done in the style of some OSCP/PWK lab machines. You can download it here.
If you have experience with web pen testing and Linux this should be a quick pwn, and if you’re new, it’s a decent first box to try.
Few tools are needed other than your browser, NMAP, and an SSH client.
Posted in CTF Walkthroughs, Security. Tagged oscp, vulnhub.
“Web Developer” is the first in a new series of vulnerable machines by Fred Wemeijer on Vulnhub.
Posted in CTF Walkthroughs, Security. Tagged vulnhub.
The author describes HackInOS as a “beginner level CTF style” VM.
A year ago, I looked at the CISSP and thought it looked unattainable.
I chalked it up as a “long-term” goal, maybe in 5 years.
But after passing the CEH and PenTest+ in 2018, I gained more confidence and decided to dive in.
Everyone’s shared stories helped me immensely in my journey, and maybe I can help you, too.
Here’s another easy VulnHub VM.
My goal this month is to increase the speed that I pop these boxes, in preparation for the OSCP.
I had already completed the first entry in the Basic Pentesting series by this author in about 20 minutes, and wanted to see if I could crack this one in under an hour as well. The author states that it is a “a moderate step up in difficulty” from the first.
LazySysAdmin is another VulnHub CTF.
The description suggests you shouldn’t overthink this. The author states that it was built out of frustration from failing the OSCP exam and that you should be looking right “in front of you” for the answers.
The description intrigued me, as my main goal this month has been to increase the speed that I solve these VMs and reduce the time wasted in rabbit holes.
Here’s my study guide for the CompTIA PenTest+ beta exam. I have yet to take the test, but have been following the random public comments shared by others.
All of these topics are from the exam objectives, but some things are mentioned more often online than others. I’m focusing my studies on what people are talking about the most.
Posted in Certifications, Security. Tagged ceh, certifications, comptia.
There are no official study materials so we’re on our own here. Good luck!
Posted in CTF Walkthroughs, Security. Tagged oscp.
After completing the CEH, I immediately set my sights on the OSCP.
That’s the Offensive Security Certified Professional. It is notorious for its 24-hour long exam and (suspected) low pass rate, as well as its challenging course labs.
All the cool nerds want this cert. That includes me, of course! I MUST HAVE IT.
Posted in Certifications, Security. Tagged certifications, oscp.