Footprinting and Scanning | eJPT
eJPT notes on footprinting and scanning: network mapping with Wireshark, ARP scanning, host discovery with fping, and port scanning essentials.
Blog
Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be.
Information Gathering | eJPT
eJPT notes on passive and active information gathering: WHOIS, DNS reconnaissance, WAF detection and subdomain enumeration.
Mastering the eJPT Exam: Tips for Success
How to pass the eLearnSecurity eJPT exam with a 91% score: key concepts, realistic practice, thorough enumeration and time management on exam day.
Servers & Services Enumeration | eJPT
eJPT notes on server and service enumeration, covering SMB protocols, OS discovery, security modes and session enumeration with nmap scripts.
System-Host Based Attacks | eJPT
eJPT notes on host-based attacks: Microsoft IIS WebDAV, brute forcing with Hydra, SMB exploitation with PsExec and EternalBlue, and WinRM access.
Vulnerability Assessment | eJPT
eJPT notes on vulnerability assessment: nmap script scanning for Heartbleed (CVE-2014-0160), EternalBlue (CVE-2017-0143) and SSL cipher enumeration.
Host Your Own Secure Website on the Dark Web with a Custom Onion Domain
Hosting a dark web site end to end: configuring Nginx, setting up Tor as a hidden service, and generating your own custom vanity onion address.
Clear Logs and Bash History for Stealth
How attackers wipe bash history and system logs after compromising a Linux target, the last stage of exploitation, and what defenders should watch.
Control Network Traffic with Evil Limiter!
Evil Limiter uses ARP spoofing to throttle any device on your network. Installation, device discovery and traffic limiting, plus why it only works on IPv4.