Archives

2026

• 26 Aug Attacking Google Cloud — Part 7: Staying In (Persistence in Google Cloud)
• 25 Aug Attacking Google Cloud — Part 6: The Terminal in the Browser (Cloud Shell as an Attack Tool)
• 24 Aug Attacking Google Cloud — Part 5: What a Single Leaked API Key Gives Away
• 23 Aug Attacking Google Cloud — Part 4: Service Account Impersonation & IAM Privilege Escalation
• 22 Aug Attacking Google Cloud — Part 3: Who Am I? Recon, Enumeration & Credential Hunting
• 21 Aug Attacking Google Cloud — Part 2: Getting a Shell Out of the Cloud (Reverse Shells, Tunnels & Exfil)
• 20 Aug Attacking Google Cloud — Part 1: Think Like the Attacker (A GCP Mindset & Methodology)

2025

• 23 Aug HTB Certified Active Directory Pentesting Expert (CAPE) - How to Pass
• 27 Mar Certified Red Team Professional (CRTP) - How to Pass

2022

• 08 Dec Dumping LSASS Without Mimikatz
• 07 Dec Collecting Target Email Addresses
• 06 Dec Evasion Tactics For Scanning Targets (Active Scan)
• 05 Dec Security Devices and Software types to Detect Scans
• 04 Dec Shodan.io Tutorials for Best Practices
• 03 Dec Recon-ng Tutorials for Enumeration Targets
• 02 Dec Asset Discovery for Target
• 01 Dec Subdomain Enumeration Methods
• 19 Jun NetBIOS Pentesting Best Practices
• 16 Jun IMAP Pentesting Best Practices
• 15 Jun LDAP Pentesting Best Practices
• 14 Jun MSRPC Pentesting Best Practices
• 13 Jun MYSQL Pentesting Best Practices
• 12 Jun NFS Pentesting Best Practices
• 11 Jun ORACLE Pentesting Best Practices
• 10 Jun POP3 Pentesting Best Practices
• 09 Jun Redis Pentesting Best Practices
• 08 Jun SMB Pentesting Best Practices
• 07 Jun SNMP Pentesting Best Practicies
• 07 Jun SMTP Pentesting Best Practices
• 07 Jun DHCP Pentesting Best Practices
• 06 Jun SSH Pentesting Best Practices
• 06 Jun DNS Pentesting Best Practices
• 05 Jun VNC Pentesting Best Practices
• 05 Jun Finger Pentesting Best Practices
• 04 Jun Telnet Pentesting Best Practices
• 04 Jun FTP Pentesting Best Practices