Pentesting Guide

16 Responses

• Comments 16
• Pingbacks 0

1. Hi,

   I don’t know how to contact you so I’m leaving you this comment here.
   I was wondering how do you do the TODO lists on CherryTree that you used in the “Methodology” section.
   How do you insert that box to be “checked”?
   Thanks! 🙂

   Reply

   • Hi Jose,

     Thanks for the comment, glad you’re getting some use out of the guide.

     You can double click the box to check it.

     I’ve stopped using CherryTree recently and moved everything over to OneNote. I have to say I prefer it as it works cross platform.

     Reply

2. Hey man, I got a question regarding on putting a shell on a joomla website, can you teach me the ways to upload a shell in a joomla website ?

   Reply

   • I’m just in my phone at the moment so can’t give a lengthy response. Check out my site here https://guide.offsecnewbie.com/shells for some advice on shells

     Reply

     • Hey, It’s me again I was wondering if you have any tips or resources regarding to windows pentesting?

       Reply

       • Hi yes check out this site http://www.fuzzysecurity.com/tutorials/16.html

         Reply

         • Also my guide as windows priv escalation tips

         • When will you start making writeups again for HTB?
           By the way there’s a HTB like platform called Wizardlabs, check that out you might like it.

3. Oh, I forgot to ask you if is there any subtitles on the PWK videos?

   Reply

   • Hi , I don’t think there are any subtitles. Honestly I can’t really remember. Regarding making more write ups , I plan to but life is just very busy at the moment with baby number two arriving last week. When I get a moment to myself I definitely want to get back to doing more write-ups. I’ll check out wizard labs do you have to pay for it or is it part of the HTB?

     Reply

4. It’s not part of HTB and you don’t have to pay for it though you may encounter some minor issues since this is a new platform. Congratulations man! You better take care of your family first.

   Reply

5. https://www.rationallyparanoid.com/articles/tcpdump.html

   Link no longer works

   Reply

   • Looks like the web server is down – it’s not a server I have control over. I was up a few days ago when I checked. Give it a day or so to see if its backup.

     Reply

     • updated the page with TCP Dump commands https://guide.offsecnewbie.com/tcp-dump-commands

       Reply

6. Hi,
   Thanks for the Amazing resource . This will help me for my oscp preparation .
   Just one request , can you please upload https://guide.offsecnewbie.com/ to github or make a pdf .I just want an offline version of this .
   Waiting for your reply ,
   Thank you .

   Reply

   • Hi Parth,

     Glad you’re finding my notes useful. Regarding an offline version, if more people are interested then this is something that I’ll likely do for members at some point https://www.buymeacoffee.com/OffSecNewbie.

     Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.