Clik here to view.
Arsenal-NG: A Terminal Cheat-Sheet Launcher for Faster Penetration Testing
Overview Arsenal-NG is an interactive, terminal-based launcher that turns a sprawling collection of offensive-security tools into a single searchable command cheat-sheet. Instead of memorising flags...
View ArticleClik here to view.
Windows Privilege Escalation: Bypass UAC
Overview This article delivers a complete, hands-on walkthrough of User Account Control (UAC) bypass techniques against a default-configured Windows 10 host. The walkthrough begins with reconnaissance...
View ArticleClik here to view.
A Detailed Guide on SSH Port forwarding & Tunnelling
This article walks through SSH tunnelling in a practical, lab‑oriented way. You will see how to set up a loopback‑bound Apache2 web server as a protected target, then use Local, Dynamic, and Remote...
View ArticleClik here to view.
A Detailed Guide on Local Port Forwarding
In the contemporary digital world, penetration testing and red team engagements, direct access to target systems from the attacker’s machine is uncommon. Many services are bound solely to localhost or...
View ArticleClik here to view.
Network Pivoting using Ligolo-MP – Complete Guide
In modern penetration testing, gaining an initial foothold on an internet-facing machine is rarely the end goal. The most sensitive assets — databases, domain controllers, internal web applications,...
View ArticleClik here to view.
NTLM Reflection Attack
In Active Directory environments, delegation abuse via NTLM reflection is a common attack technique. Attackers exploit misconfigured delegation settings to reflect NTLM authentication back to target...
View ArticleClik here to view.
Windows Dll Execution Techniques
Overview Dynamic Link Libraries (DLLs) are shared code modules on Microsoft Windows that can be loaded and executed at runtime by host processes. Because DLL functionality is deeply integrated into the...
View ArticleClik here to view.
PostgreSQL Penetration Testing
PostgreSQL is one of the most popular open-source relational database systems, powering everything from small web applications to enterprise-scale platforms. Its widespread adoption makes it a...
View ArticleClik here to view.
A Detailed Guide on Feroxbuster
Feroxbuster is a robust tool designed to identify directories and files on web servers using brute-force techniques. It is frequently utilized in penetration testing and security evaluations to detect...
View ArticleClik here to view.
Penetration Testing on MYSQL (Port 3306)
MySQL is an open-source Relational Database Management System (RDBMS). It is widely used for managing and organizing data in a structured format, using tables to store the data. MySQL functions in a...
View ArticleClik here to view.
File Transfer Cheatsheet: Windows and Linux
File transfer is a crucial step in the post-exploitation scenario while performing penetration testing or red teaming. There are various ways to do the file transfer, here in this article we are going...
View ArticleClik here to view.
MSSQL for Pentester: Command Execution with xp_cmdshell
Transact-SQL (T-SQL) is an extension of the SQL language used primarily in Microsoft SQL Server. T-SQL expands the functionality of SQL by adding procedural programming features, control-of-flow...
View ArticleClik here to view.
Jenkins Penetration Testing
Jenkins is an open-source automation server used for continuous integration (CI) and continuous delivery (CD). It’s built on Java and utilizes a scripting platform for automation. Jenkins automates...
View ArticleClik here to view.
Tomcat Penetration Testing
Apache Tomcat, developed by the Apache Software Foundation, is a widely used web server and servlet container. Originally, it served as a demonstration platform for Java Servlet and JavaServer Pages...
View ArticleClik here to view.
A Detailed Guide on RustScan
In the realm of cybersecurity, network scanning tools play a vital role in reconnaissance and vulnerability assessment. Among the array of options available, Rustscan has emerged as a formidable...
View ArticleClik here to view.
Best Alternative of Netcat Listener
Pentesters rely on a variety of tools to establish connections and maintain access during security assessments. One critical component of their toolkit is the listener—a program that listens for...
View ArticleClik here to view.
64-bit Linux Assembly and Shellcoding
Introduction Shellcodes are machine instructions that are used as a payload in the exploitation of a vulnerability. An exploit is a small code that targets a vulnerability. Shellcodes are written in...
View ArticleClik here to view.
A Detailed Guide on Ligolo-Ng
This comprehensive guide delves into the intricacies of Lateral Movement utilizing Ligolo-Ng, a tool developed by Nicolas Chatelain. The Ligolo-Ng tool facilitates the establishment of tunnels through...
View ArticleClik here to view.
Easy way to Generate Reverse Shell
In this article, we will learn how to get a reverse in a few easy steps. Usually, the problem when reverse shell commands is to remember its long and complicating syntax. But due to growing AI of our...
View ArticleClik here to view.
Firefox Addons for Pentesting
In this article, we will learn how to customise the Firefox browser for efficient pen-testing along with extensions you can use for the same purpose. Table of Contents: Introduction Understanding the...
View Article
![BLACKPINK – DEADLINE – EP [iTunes Plus M4A]](http://is1-ssl.mzstatic.com/image/thumb/Video211/v4/de/b3/b1/deb3b1d4-ba28-22e8-2428-ef97617b2a4b/90d54d743002a6d66308f217cd867947_Preview_Image_Intermediate_nonvideo_sdr_426725135_2574858051.png/316x316bb.webp)
