Practical cybersecurity guides, labs & compliance
Review an open port 3306 by separating the port observation, protocol identity and database context. Use the evidence card to retain unresolved application relationships and the permitted scope of any follow-up.
Validate a CME-reported OS label by preserving protocol metadata and the tool context. Use the confidence record to separate returned strings, conflicting clues and verified inventory while leaving unresolved versions explicit.
Plan CrackMapExec recon with the installed version, selected options, permitted identities and request budget recorded. Retain actual behavior and stop conditions without equating quiet output or failure caps with negligible impact.
Separate smbclient share enumeration, share connection, directory listing and file reads. Compare requests under the same identity and conditions, then report the first failed operation without inferring untested permissions.
Compare SMB behavior on ports 139 and 445 using the same target, client, identity and operation. Preserve transport context and the first failure before attributing different results to dialect, signing or access policy.
A flexible 30-day Kioptrix practice plan covering compatible VM setup, isolated networking, weekly learning milestones, session notes, and a validated practice-time planner.