Introduction
Hello! I am currently working as a penetration tester, and I have earned my OSCP, OSEP, and OSWE certifications. I'm currently working on the OSED course materials in my final course while working towards the OSCE^3.
I try to keep pretty thorough and sanitized notes as I work through different training courses, CTF's, and machines on platforms like Hack The Box. I publish these notes, when allowed, in the hope that they can help somebody understand a task or technique they're struggling with.
Table of Contents
CTF Writeups
FireEye
Hack The Box
- HTB Boxes
- SwagShop
- Postman
- Traverxec
- OpenAdmin
- Resolute
- Sauna
- Remote
- Traceback
- Blunder
- Admirer
- Tabby
- Cascade
- Magic
- Cache
- Buff
- Fuse
- SneakyMailer
- Quick
- OpenKeys
- Worker
- Omni
- Passage
- Blackfield
- Unbalanced
- Feline
- Lame
- Legacy
- Brainfuck
- Blue
- Bashed
- Devel
- Shocker
- Optimum
- Nibbles
- Granny
- Beep
- Bastard
- Cronos
- Silo
- Nineveh
- Arctic
- Grandpa
- Sense
- SolidState
- Bounty
- Node
- Jerry
- Valentine
- Conceal
- Poison
- Sunday
- Chatterbox
- Forest
- TartarSauce
- Blocky
- Mirai
- Frolic
- Irked
- FriendZone
- Bastion
- Writeup
- Networked
- Servmon
- Popcorn
- Haircut
- Active
- SecNotes
- Jarvis
- Mango
- Doctor
- BankRobber
- Bank
- HTB Challenges
- HTB CTFs
MetaCTF
- CyberGames 2021
Offensive Security
SANS
- KringleCon 2020
- Hackfest 2021
- KringleCon 2021
- KringleCon 2022
- Areas
- Terminals
- Wireshark Phising
- Windows Event Logs
- Suricata Regatta
- Clone with a Difference
- Prison Escape
- Jolly CI/CD
- Naughty IP
- Credential Mining
- 404 FTW
- IMDS, XXE, and Other Abbreviations
- Open Boria Mine Door
- Glamtariel's Fountain
- AWS CLI Intro
- Trufflehog Search
- Exploitation via AWS CLI
- Buy a Hat
- Blockchain Divination
- Exploit a Smart Contract
- KringleCon 2023
- Offensive Operations CTF 2024
Offensive Reference Notes
General Notes
- General Notes
- OSINT
- Target Enumeration
- File Transfers
- Windows CLI
- Port Forwarding
- Compiling Code
- Hashes & Passwords
- Helpful Python Methods
Shells
Kernel Exploits
Network Services
- Apple Remote Desktop
- HTTP
- Java (JVM)
- Kerberos
- LDAP
- Redis
- RDP
- RPC
- rsync
- SCCM
- SQL
- SSH
- Telnet
- VNC
- |WinRM
- WMI
- Xorg