Deepak Prasad

Provision AWS EC2 instances with Ansible using amazon.aws.ec2_instance. Create a security group, launch and tag Ubuntu instances, and start, stop, query, and terminate EC2 resources.

Learn AWS CLI on Ubuntu with a complete first workflow—sign in to AWS, verify your identity, launch an Ubuntu EC2 instance, connect with SSH, upload a file to S3, and remove the resources.

Learn physical penetration testing methodology end to end: define scope and RoE, run authorized site surveys, tailgating and badge tests, USB canary drops, and internal objective checks — then document findings and …

Learn how to validate vulnerability scan results, identify Nessus/OpenVAS false positives, verify affected CVE versions, and find matching exploits with SearchSploit and Metasploit.

Use kube-hunter on an authorized lab cluster to probe Kubernetes attack surfaces from remote, host, and in-pod vantage points, interpret findings, and compare it with kube-bench and Trivy for CompTIA PenTest+.

Compare Trivy and Grype on one pinned Docker image digest, explain why CVE counts differ, scan SBOMs with Syft and Trivy, run Trivy IaC checks, and set policy-based CI gates.

Install Nessus Essentials on Kali Linux, register at port 8834, wait for plugins, run a Basic Network Scan against Metasploitable 2, and read plugin output without treating every severity as confirmed impact.

Use Nikto on Kali Linux to scan web servers for misconfigurations and exposed paths on Metasploitable 2, choose the right target URL, read findings, and spot false positives and incomplete scans.

Compare authenticated vs unauthenticated, internal vs external, network and host vulnerability scans, plus SAST, DAST, IAST and SCA with Nmap and Nikto examples on Kali Linux.

PowerView AD enumeration on GOAD-Light — load PowerSploit PowerView on castelblack, run Get-Domain, Get-DomainUser -SPN, trusts, GPOs, and ACL queries with atexec, and compare PowerView to Get-ADUser and SharpView.

Learn how to write a .bat file on Windows, from echo and variables to arguments, loops, delayed expansion, exit codes, and a complete logging backup script you can adapt.

Relay captured NetNTLM authentication from Responder LLMNR poisoning to an unsigned SMB host with ntlmrelayx on Kali — find relay targets, disable Responder SMB, and verify the chain on GOAD-Light.

Step by step instructions to install kali linux in virtualbox with screenshots. 2 different methods to install Kali Linux on Oracle VirtualBox

Use NetExec on Kali to validate AD credentials, enumerate SMB shares, confirm (Pwn3d!), execute commands over SMB and WinRM, and open an Impacket wmiexec shell.

Dump LSASS logon secrets, local SAM accounts, and DPAPI keys with Mimikatz on GOAD-Light castelblack — stage from Kali with NetExec, run sekurlsa::logonpasswords, and overview Rubeus and Certify for PenTest+.

Learn LLMNR and NBT-NS poisoning with Responder on Kali Linux. Capture NetNTLMv1/v2 authentication hashes in an AD lab, inspect logs, and optionally crack weak passwords.

Scan Git repositories for secrets with TruffleHog on Kali Linux. Find API keys, private keys, and credentials in Git history, verify findings, and validate with git pickaxe in an authorized lab.

Learn how to rename a file in Python with pathlib Path.rename(), Path.replace(), os.rename(), os.replace(), and shutil.move(), including extension changes, batch renames, overwrite rules, and cross-filesystem moves.

theHarvester tutorial for Kali Linux: passive reconnaissance with email enumeration, subdomain discovery, Hunter API key setup in api-keys.yaml, source selection, CLI commands, and JSON/XML export on Rolling 2026.2.

Learn how to install and run SpiderFoot on Kali Linux, start the web UI, run a passive OSINT scan, and read Summary, Browse, and Graph results, with CLI and deployment options.

OSINT tools for pentesters, organized by what you investigate — domain/IP, email, username, image metadata, and breach data. Compare theHarvester, Shodan, Censys, Sherlock, ExifTool, SpiderFoot, and more, with tested …

Learn how to write a professional penetration test report, with an executive summary, technical finding example, CVSS guidance, remediation steps, and a copyable pentest report template.

Learn pentest collaboration and communication: peer review, stakeholder alignment, escalation paths, secure distribution, business impact analysis, and client acceptance for PenTest+ and client work.

Install Cervantes with Docker Compose, log findings per client and project, and export penetration test reports while you track engagement status from one workspace.

Learn how to analyze penetration test findings and recommend remediation across technical, administrative, operational, and physical controls, with prioritization guidance and worked mapping examples for CompTIA …

Compare PTES, OSSTMM, CREST, MITRE ATT&CK, OWASP and other pentest frameworks. Learn what each is for, their differences, and which to use for your engagement.

Learn penetration testing rules of engagement: scope, authorization, permitted techniques, testing windows, escalation, data handling, and a practical RoE outline.

Create an OpenSSL certificate chain with a root CA, intermediate CA, and leaf certificate. Build fullchain.pem, set pathlen, and verify the chain.

Tableau developer interview questions and answers for {year}: LOD expressions, calculated fields, joins vs relationships, dashboard performance, Tableau Server, RLS, extracts, and scenario-based prep.

ServiceNow developer interview questions for {year}: platform tables, client and server scripting, GlideRecord, ACLs, Workflow Studio, REST, update sets, ITSM scenarios, and senior prep with sample answers.