---
title: "Amr Elsagaei - Blog, page 7"
description: "Page 7 of the archive. Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be."
canonical_url: "https://amrelsagaei.com/blog/7"
meta:
  "og:description": "Page 7 of the archive. Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be."
  "og:title": "Amr Elsagaei - Blog, page 7"
---

# Blog

Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be.

- ## [Footprinting and Scanning | eJPT](https://amrelsagaei.com/footprinting-and-scanning-ejpt)

  eJPT notes on footprinting and scanning: network mapping with Wireshark, ARP scanning, host discovery with fping, and port scanning essentials.
- ## [Information Gathering | eJPT](https://amrelsagaei.com/information-gathering-ejpt)

  eJPT notes on passive and active information gathering: WHOIS, DNS reconnaissance, WAF detection and subdomain enumeration.
- ## [Mastering the eJPT Exam: Tips for Success](https://amrelsagaei.com/mastering-the-ejpt-exam-tips-for-success)

  How to pass the eLearnSecurity eJPT exam with a 91% score: key concepts, realistic practice, thorough enumeration and time management on exam day.
- ## [Servers & Services Enumeration | eJPT](https://amrelsagaei.com/servers-services-enumeration-ejpt)

  eJPT notes on server and service enumeration, covering SMB protocols, OS discovery, security modes and session enumeration with nmap scripts.
- ## [System-Host Based Attacks | eJPT](https://amrelsagaei.com/system-host-based-attacks-ejpt)

  eJPT notes on host-based attacks: Microsoft IIS WebDAV, brute forcing with Hydra, SMB exploitation with PsExec and EternalBlue, and WinRM access.
- ## [Vulnerability Assessment | eJPT](https://amrelsagaei.com/vulnerability-assessment-ejpt)

  eJPT notes on vulnerability assessment: nmap script scanning for Heartbleed (CVE-2014-0160), EternalBlue (CVE-2017-0143) and SSL cipher enumeration.
- ## [Host Your Own Secure Website on the Dark Web with a Custom Onion Domain](https://amrelsagaei.com/host-your-own-secure-website-on-the-dark-web-with-a-custom-onion-domain)

  Hosting a dark web site end to end: configuring Nginx, setting up Tor as a hidden service, and generating your own custom vanity onion address.
- ## [Clear Logs and Bash History for Stealth](https://amrelsagaei.com/clear-logs-and-bash-history-for-stealth)

  How attackers wipe bash history and system logs after compromising a Linux target, the last stage of exploitation, and what defenders should watch.
- ## [Control Network Traffic with Evil Limiter!](https://amrelsagaei.com/control-network-traffic-with-evil-limiter)

  Evil Limiter uses ARP spoofing to throttle any device on your network. Installation, device discovery and traffic limiting, plus why it only works on IPv4.

## Sitemap

See the full [sitemap](/sitemap.md) for all pages.