Practical cybersecurity guides, labs & compliance
Review a proposed privilege-escalation path against the identity, permissions and prerequisites actually observed. Use the hypothesis filter to choose the next authorized check and document absent evidence or an unchanged boundary.
Check a suspected Nmap version false positive using probe context, XML output and authorized package evidence. Use the verification record to separate a service clue from confirmed vulnerability prerequisites.
Troubleshoot SMB enumeration by separating transport, negotiation, session setup, tree connect and file operations. Use the permission matrix and working record to document the last successful stage, exact error and next controlled check.
Rewrite a vulnerability finding with the affected asset, prerequisites and reproducible evidence. Use the mini template and review record to distinguish demonstrated impact, plausible consequences, severity assumptions and proposed remediation.
Interpret PHP URLs, headers, errors and assets as clues in a scoped review. Use the confidence record to compare explanations and confirm the serving runtime before turning a technology hint into a vulnerability claim.
Reconcile security-tool costs across contracts, renewals, implementation, internal labor and overlapping services. Use the budget worksheet and worked example to compare first-year and renewal assumptions before a purchase.
Turn a Kioptrix observation into a testable hypothesis. Use the hypothesis card to record prerequisites, competing explanations, one distinguishing check and a supported, contradicted or inconclusive result.
Map one Kioptrix task to the capabilities it requires. Use the capability-to-task record to retain containment, evidence and recovery while identifying what a smaller practice setup still cannot support.
Choose a modern lab for a question your Kioptrix work did not answer. Use the gap map and next-exercise note to compare changed technologies, required support, permissions and the evidence still needed.
Learn five network observations in a Kioptrix lab: interface addresses, selected routes, local neighbors, port responses and application messages. Follow the command examples and use the worksheet to record what each result establishes.