Latest Articles - Page 17

SSTI tutorial: detect a server-side template injection vulnerability with benign payloads such as {{7*7}}, identify engines like Jinja2 from response behavior, and keep template source trusted.

XSS attack tutorial on Kali with DVWA: learn reflected, stored, and DOM XSS through the input-context-execution model, prove each type safely, then cover Burp checks, prevention, CSP, and XSS vs CSRF.

Fix Terraform AWS UnauthorizedOperation on Ubuntu — confirm which IAM identity runs plan and apply, decode the authorization failure message with the AWS CLI, read the denied API action, and request or attach the missing …

Fix Terraform destroy DependencyViolation on AWS VPC — find subnet ENI and gateway blockers with the AWS CLI, recover when child resources were removed from state with terraform import, and destroy in dependency order.

Reproduce and fix Terraform AWS provider No valid credential sources found on Ubuntu — shared credentials file, environment variables, named profiles, aws login export-credentials, IAM Identity Center SSO, EC2 instance …

SQL injection tutorial on Kali: understand the vulnerable query, confirm SQLi manually on DVWA, UNION and blind techniques, then automate with sqlmap cookies, Burp requests, and limited enumeration.

Burp Suite tutorial for beginners on Kali: Proxy, HTTP history, target scope, intercept, Repeater, Intruder, external browser setup, and troubleshooting with DVWA on localhost.

msfvenom encoders change payload bytes for bad characters, not AV evasion. See why shikata_ga_nai still gets detected and how to test encoding honestly in a lab.

Learn how to test SSH logins with Hydra and Medusa on Kali Linux using username and password lists, controlled threads, credential verification, and practical troubleshooting.

Build targeted Kali password wordlists with CeWL, CUPP, and Crunch: choose the right strategy, clean and merge seeds, and know when hashcat masks beat storing every candidate.

Provision AWS EC2 instances with Ansible using amazon.aws.ec2_instance. Create a security group, launch and tag Ubuntu instances, and start, stop, query, and terminate EC2 resources.

Build a two-node kubeadm cluster on Ubuntu EC2 with containerd and Calico, open the right security group ports, join a worker, and deploy nginx to verify scheduling.

Learn hashcat on Kali: pick -m hash mode and -a attack mode, run wordlist rules and mask attacks, read Cracked vs Exhausted status, and fix Token length exception and No hashes loaded.

Learn AWS CLI on Ubuntu with a complete first workflow—sign in to AWS, verify your identity, launch an Ubuntu EC2 instance, connect with SSH, upload a file to S3, and remove the resources.

Learn John the Ripper on Kali Jumbo: prepare hashes, fix format detection, run wordlist rules mask and single modes, crack ZIP SSH and PDF with *2john, and read john.pot with --show.

Learn physical penetration testing methodology end to end: define scope and RoE, run authorized site surveys, tailgating and badge tests, USB canary drops, and internal objective checks — then document findings and …

Learn how to validate vulnerability scan results, identify Nessus/OpenVAS false positives, verify affected CVE versions, and find matching exploits with SearchSploit and Metasploit.

Use kube-hunter on an authorized lab cluster to probe Kubernetes attack surfaces from remote, host, and in-pod vantage points, interpret findings, and compare it with kube-bench and Trivy for CompTIA PenTest+.

Compare Trivy and Grype on one pinned Docker image digest, explain why CVE counts differ, scan SBOMs with Syft and Trivy, run Trivy IaC checks, and set policy-based CI gates.

Install Nessus Essentials on Kali Linux, register at port 8834, wait for plugins, run a Basic Network Scan against Metasploitable 2, and read plugin output without treating every severity as confirmed impact.

Use Nikto on Kali Linux to scan web servers for misconfigurations and exposed paths on Metasploitable 2, choose the right target URL, read findings, and spot false positives and incomplete scans.

Compare authenticated vs unauthenticated, internal vs external, network and host vulnerability scans, plus SAST, DAST, IAST and SCA with Nmap and Nikto examples on Kali Linux.

PowerView AD enumeration on GOAD-Light — load PowerSploit PowerView on castelblack, run Get-Domain, Get-DomainUser -SPN, trusts, GPOs, and ACL queries with atexec, and compare PowerView to Get-ADUser and SharpView.

Learn how to write a .bat file on Windows, from echo and variables to arguments, loops, delayed expansion, exit codes, and a complete logging backup script you can adapt.

Relay captured NetNTLM authentication from Responder LLMNR poisoning to an unsigned SMB host with ntlmrelayx on Kali — find relay targets, disable Responder SMB, and verify the chain on GOAD-Light.

Step by step instructions to install kali linux in virtualbox with screenshots. 2 different methods to install Kali Linux on Oracle VirtualBox

Use NetExec on Kali to validate AD credentials, enumerate SMB shares, confirm (Pwn3d!), execute commands over SMB and WinRM, and open an Impacket wmiexec shell.

Dump LSASS logon secrets, local SAM accounts, and DPAPI keys with Mimikatz on GOAD-Light castelblack — stage from Kali with NetExec, run sekurlsa::logonpasswords, and overview Rubeus and Certify for PenTest+.

Learn LLMNR and NBT-NS poisoning with Responder on Kali Linux. Capture NetNTLMv1/v2 authentication hashes in an AD lab, inspect logs, and optionally crack weak passwords.

Install a private CA certificate into the Linux system trust store with update-ca-certificates on Debian and Ubuntu or update-ca-trust on RHEL and Fedora, verify the anchor landed, remove it again, and fix the …