OSCP Prep Episode 13 – HackTheBox and Back to Basics

Having done the Kioptrix series of vulnerable machines, I decided to head over to HackTheBox and attempt some of their beginner machines. I had heard good things about the HackTheBox platform in the past, and having now used it, I can't stress enough how amazing of a resource it is. After signing up, you are … Continue reading OSCP Prep Episode 13 – HackTheBox and Back to Basics →

The Hacker Playbook 2 – Book Review

Having done the four beginner Kioptrix boxes, I decided to go back into reading to see if I could expand on what I had learned so far. This lead me to reading The Hacker Playbook 2: Practical Guide to Penetration Testing by Peter Kim this week. This book is not intended for the pure beginner, and Kim … Continue reading The Hacker Playbook 2 – Book Review →

OSCP Prep: Episode 12 – Kioptrix 1-4 Vulnerable Machines

I gave some thought into how I wanted to approach these next few weeks after finishing the Hands on Introduction to Hacking book. My main toss up ended up being between attempting beginner boxes and gaining some practical experience or reading another book for more theoretical knowledge. Ultimately, I decided to just give some boxes … Continue reading OSCP Prep: Episode 12 – Kioptrix 1-4 Vulnerable Machines →

Penetration Testing: A Hands-on Introduction to Hacking – Book Review

When I first decided I would begin this journey of learning penetration testing, I did some research on where the best place to start would be. It wasn't long before I stumbled across a book titled Penetration Testing: A Hands-on Introduction to Hacking by Georgia Weidman. As someone who had next to no prior knowledge of penetration … Continue reading Penetration Testing: A Hands-on Introduction to Hacking – Book Review →

OSCP Prep – Episode 11: Client Side Attacks

Client side exploitation is penetration testing from a different perspective. The other attacks I have covered so far have all required direct access to a network to be successful, which has become increasingly difficult as network engineers and software developers strengthen their 'perimeter' defenses. As a result, client side attacks, where users unwittingly open the … Continue reading OSCP Prep – Episode 11: Client Side Attacks →