Beyond PEB Walking: Alternative Ways to Find DLL Base Addresses and Resolve Functions at Runtime If you’ve ever looked into how shellcode or position-independent code resolves Windows API function...
I’m Jay, a student exploring the offensive security space with a focus on red teaming and malware development. I spend my time studying detection mechanisms, researching evasion concepts, and learn...
Offensive Development Practitioner Course and Exam Review: My Experience I’m Jay, a student who spends most of his time on red teaming and malware development. I enjoy understanding how security...
ARTOC Course Review Who Am I & Why My Opinion Matters I’m Jay, a student exploring the offensive security space with a focus on Red Teaming and malware development. I spend my time studying d...
Control [Hard] OSEP 🤨 Enumeration nmap_default 10.129.133.21 -p- PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 10.0 | http-methods: | Supported Methods: OPTIO...
Flight [Hard] OSEP 🤨 Enumeration For Subdomain Fuzzing by using wfuzz wfuzz -u http://10.129.228.120 -H "Host: FUZZ.flight.htb" -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000...
Querier [Medium] OSEP 🤨 Enumeration nmap -sCV -T4 --min-rate 10000 -p- -v -oA nmap/tcp_default 10.129.140.22 PORT STATE SERVICE VERSION 135/tcp open msrpc Microsoft Wind...
StreamIO [Medium] OSEP 🤨 Enumeration nmap -sCV -T4 --min-rate 10000 -p- -v -oA nmap/tcp_default 10.129.141.224 # Nmap 7.95 scan initiated Wed Aug 27 20:38:36 2025 as: /usr/lib/nmap/nmap -sCV ...
Outdated [Medium] [OSEP] 🤨 Enumeration nmap -T4 -vv -sC -sV -oN nmap/intial $IP PORT STATE SERVICE REASON VERSION 25/tcp open smtp syn-ack ttl 127 hMailServer...
Timelapse [Easy] [OSEP] 🤨 Enumeration nmap -T4 -vv -sC -sV -oN nmap/intial 10.129.185.51 # Nmap 7.95 scan initiated Sun Aug 17 21:15:37 2025 as: /usr/lib/nmap/nmap -T4 -vv -sC -sV -oN nmap/in...