Practical cybersecurity guides, labs & compliance
Review an open port 3306 by separating the port observation, protocol identity and database context. Use the evidence card to retain unresolved application relationships and the permitted scope of any follow-up.
Choose Kioptrix Level 1 reading from a specific blocked concept. Use the checkpoint to connect a reference section with your own explanation, note outdated instructions and identify the next small practice task.
Prepare Kali for Kioptrix by recording target identity, the selected interface and route, scanner version, output location and recovery point. Use the readiness handoff to resolve unknown setup conditions before scanning.
Review a Kioptrix HTTP service through repeatable requests, response baselines and server clues. Preserve hostname, session and redirect context before interpreting paths, status codes or implementation hints.
Build a comparable Kioptrix recon routine with target identity, scan scope, tool options and raw evidence recorded. Rank a small set of follow-up questions while keeping warnings and untested coverage visible.
Plan a bounded Wget collection with explicit target scope, traversal depth, request limits and stopping conditions. Use the collection record to separate recursion settings from actual resource use and useful evidence.
Inspect raw HTML with curl while preserving request, redirect and response context. Review extracted links against the actual base URL and authorized scope, and retain the limits of regex and static HTML parsing.
Diagnose a legacy SMB failure at the operation that actually failed. Capture an unchanged Kali client baseline, then interpret any scoped compatibility comparison without treating access denial as proof of a dialect mismatch.
Understand why nbtscan can return a hostname without a share list. Separate NetBIOS name information from SMB enumeration, check the installed tool syntax and choose the next step from the operation that actually failed.
Diagnose smbclient tree-connect failures with the exact share token, shell quoting, session identity and returned status. Use a single-change record to compare one evidenced input instead of changing several settings at once.