Practical cybersecurity guides, labs & compliance
Diagnose terminal problems by separating the local terminal, transport, remote shell and PTY behavior. Use the working note to test echo, signals and terminal size separately while preserving a recovery route.
Review suspected Bash or Zsh history exposure without copying or replaying secrets. Use the response card to record access context, owner-led credential containment and the limits of history settings or deletion.
Describe a Kioptrix command-injection lead with the baseline request, controlled variation and attributed effect. Use the working note to separate observed behavior, execution claims, remaining alternatives and remediation that was actually retested.
Distinguish the local smbclient version, negotiated SMB dialect and remote Samba build. Use the evidence table to label each clue, handle disagreement and report an unknown version without inferring a client failure.
Use this Kioptrix Level 2 lab companion to compare login and command-execution results, review privilege prerequisites and save structured notes. Illustrative examples; external full walkthroughs are clearly marked.
Review Wireshark evidence with the original capture and collection conditions preserved. Correlate a permitted action with endpoint observations and distinguish display filtering from sanitization, complete capture or proof of execution.
Map an authorized web app through roles, requests, inputs, data flows and trust boundaries. Label observations and inferences separately and preserve identity and state context before treating a visible or hidden route as an authorization result.
Choose Nmap option groups from a defined question and approved scan scope. Keep discovery, protocol, port coverage, timing, combined behavior and output choices explicit so the evidence and untested areas can be interpreted.
Review a Kioptrix privilege-escalation lead by connecting an observed permission to a more-privileged consumer and its prerequisites. Preserve identity, runtime context and uncertainty before any separately authorized validation.
Match Kioptrix level numbers to the original VM release and archive before downloading or following a walkthrough. Use release-specific setup notes and the working record to preserve image identity, compatibility and the next learning goal.