Practical cybersecurity guides, labs & compliance
Kioptrix Labs 
Review a sudo NOPASSWD rule through its Runas identity, executable, arguments, tags and environment. Use the applicability record to compare GTFOBins prerequisites with actual policy evidence without assuming unrestricted root access.
Compare FFUF wordlists under the same request conditions, candidate normalization and workload limits. Use response baselines and a recorded filter rule to review useful coverage, missed candidates and uncertainty.
Plan a Hydra lab exercise with approved accounts, credential sources and per-account and total attempt limits. Use the stop card to prioritize lockout and service-impact boundaries over an illustrative study timer.
Name ShareX evidence files for chronological retrieval and collision avoidance, then verify the saved result. Use the acceptance test to review timezone, after-capture uploads, original artifacts and separately labeled redacted copies.
Review an OSCP lab VM through the intended clipboard, shared-folder and recovery workflow. Record hypervisor and guest-tool context, test with a harmless file and distinguish optional integration restrictions from current exam requirements.
Review an AD permission candidate with the principal SID, target object, property scope and inheritance recorded. Use the candidate record to separate directory observations, effective-rights questions and separately permitted validation.
Review file uploads as separate request, acceptance, processing, storage and retrieval observations. Preserve a baseline and one permitted change, and use the lifecycle record to avoid inferring execution from an HTTP success response.
Preserve Nmap XML and its scan conditions alongside each Obsidian host note. Use the comparison record to distinguish genuine retest differences from changed port scope, target identity, import behavior or missing coverage.
Build an initial-access practice record with the objective, observed access, reproducible steps and submission state. Use the handoff to review evidence against current official requirements without treating checklist completion as awarded points.
Compare TUN, SOCKS and transparent forwarding through one required application flow. Record transport, resolution and each hop, then test a permitted representative connection without assuming one working browser covers every protocol.