In this guide, we discuss penetration testing-focused operating systems, primarily examining different Linux distributions designed specifically for security testing and ethical hacking. Choosing ...

This hands-on lab will walk you through how to set up infrastructure for a WordPress installation on AWS using Terraform. Building on the VPC foundation from the previous tutorial, this guide demo...

This hands-on lab will walk you through how to set up a Virtual Private Cloud (VPC) on AWS using Terraform. A Virtual Private Cloud is a foundational component for building your cloud infrastructu...

This walkthrough covers Bizness, a Hack The Box machine that demonstrates exploitation of Apache OFBiz authentication bypass vulnerabilities (CVE-2023-49070 and CVE-2023-51467), Derby database enum...

This walkthrough covers Manager, a Hack The Box machine that demonstrates Active Directory enumeration, password spraying attacks, and exploitation of Active Directory Certificate Services using th...

This walkthrough covers CozyHosting, a Hack The Box machine that involves web application enumeration, exploiting Apache OFBiz authentication bypass vulnerabilities, database enumeration, hash crac...

This walkthrough covers Keeper, an easy-level machine from Hack The Box that demonstrates the exploitation of default credentials, a recent KeePass vulnerability (CVE-2023-32784), and PuTTY key-bas...

This walkthrough covers Visual, a Hack The Box machine that involves exploiting a .NET C# project build process, achieving code execution through Visual Studio build events, and performing privileg...

This walkthrough covers Sau, a Hack The Box machine that demonstrates Server-Side Request Forgery (SSRF) vulnerabilities and privilege escalation techniques. Sau provides an excellent learning opp...

This walkthrough covers Authority, a medium-level Windows machine from Hack The Box that involves SMB information disclosure, hash cracking, LDAP clear text credentials, and exploiting a configured...