Bridging Cybersecurity
Defense and Offense,
One Note at a Time.

Container Security Starts Before the Cloud

How I established a container image security baseline using distroless, Trivy, and GitHub Actions before touching any cloud infrastructure.

AWS Lab Walkthrough: Troubleshooting IAM Access Issues

Learn how to troubleshoot IAM role assumption failures by aligning identity-based policies and trust relationships while maintaining least privilege.

Exploiting AlwaysInstallElevated for Windows Privilege Escalation

A walkthrough of exploiting the AlwaysInstallElevated misconfiguration on Windows to escalate from user to SYSTEM using a malicious MSI payload.

Devel Rooted: A Hack The Box Walkthrough

This post is a walkthrough of the ‘Devel’ retired machine from Hack The Box. I gain initial access through an exposed FTP and WebDAV setup, then escalate …

LazyAdmin TryHackMe Walkthrough

A complete walkthrough of the LazyAdmin room on TryHackMe, demonstrating enumeration, exploitation, and privilege escalation.

Anonymous Rooted: A TryHackMe Walkthrough

This walkthrough covers the TryHackMe ‘Anonymous’ room. I gain user-level access via FTP and a writable script, capture the user flag, and escalate to root …

Compromising the Dev Box: A PNPT Walkthrough with Mitigation and MITRE ATT&CK Mapping

A step-by-step walkthrough of compromising the Dev Box from TCM Security’s PNPT training course, including detailed explanations, mitigation steps, and a comprehensive …

TryHackMe: Enumeration & Brute Force Room Walkthrough

Overview #This walkthrough documents my experience completing the Enumeration & Brute Force room on TryHackMe. The room provides hands-on experience with various …

Investigate Web Attacks Challenge Walkthrough (Let's Defend)

A detailed walkthrough of how to solve the ‘Investigating Web Attacks Challenge’ on Let’s Defend using the bWAPP web application as the victim.

Exploring Splunk Data Administration: Parsing, Event Line Breaking, and Data Privacy

As cybersecurity professionals, one of the key challenges we often face is the sheer volume of log data we need to analyze. Whether we’re hunting for anomalies, …

Escalate and Defend: Linux Kernel Exploit Walkthrough

A dual perspective walkthrough of TryHackMe’s Linux Privilege Escalation room (Kernel Exploits), including offensive steps and defense strategies mapped to the …

IPv6 DNS Takeover with MITM6 in an Active Directory Environment

Table of Contents # Introduction Understanding IPv6 DNS Takeover Mitigation Strategies Demonstration Steps Step 1: Setup NTLM Relay using LDAPS Step 2: Run MITM6 Simulate …

Understanding SMB Relay Attacks and Mitigation Techniques

Introduction #In the world of network security, understanding various attack vectors is critical to safeguarding systems and data. One such attack is the SMB (Server …

Understanding SMB Relay Attacks and Mitigation Techniques

Understanding LLMNR Poisoning and Mitigation Techniques

Introduction #In this blog post, I discuss a common network attack called Link-Local Multicast Name Resolution (LLMNR) poisoning. This type of attack can be highly …

My Journey to eJPT Certification: Insights and Tips for Success

Earning the INE Security Junior Penetration Tester (eJPT) certification has been a significant milestone in my cybersecurity journey. In this blog post, I’ll share …

Dancing - HTB Walkthrough by Nisha

Room Link: https://app.hackthebox.com/starting-point?tier=0 Task 1 #What does the 3-letter acronym SMB stand for? Server Message Block Task 2 #What port does SMB use to …

TryHackMe IDOR Room Walkthrough

Walkthrough of the Insecure Direct Object Reference (IDOR) room on TryHackMe, part of the Jr. Web Penetration Tester learning path. 🧭 Access the TryHackMe IDOR Room — …

Steel Mountain - TryHackMe Walkthrough by Nisha

Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration and learn a new technique …

Hacking Kenobi: From Anonymous Access to Root like a Rebel

A complete walkthrough of the Kenobi TryHackMe room, covering enumeration, exploiting ProFTPD, and privilege escalation using SUID PATH hijacking.

TryHackMe Ice - Walkthrough by Nisha

Deploy & hack into a Windows machine, exploiting a very poorly secured media server. Room Link: https://tryhackme.com/r/room/ice Task 1 - Connect #Get connected to the …

How to Install Remmina on Kali Linux

Step 1: Update Your System Install Remmina sudo apt install remmina Launch Remmina Step 4: Configure a Remote Connection

Rooting the Academy Box: A Practical Ethical Hacking Walkthrough

Exploiting EternalBlue (MS17-010): A Walkthrough and Protection Measures

A detailed walkthrough of how to exploit the Eternal Blue vulnerability on a Windows 7 Ultimate machine, covering both manual and automated methods.

TryHackMe Ignite Room Walkthrough: Exploiting Fuel CMS 1.4.1 RCE

Walkthrough of TryHackMe’s Ignite room where we exploit a Remote Code Execution vulnerability in Fuel CMS 1.4.1 (CVE-2018-16763). Learn the steps of enumeration, …

TryHackMe Walkthough - Post-Exploitation Basics

Room Link: Task 2 Enumeration w/ Powerview

Windows Event Logs (TryHackMe Walkthrough)

Introduction to Windows Event Logs and the tools to query them. # Room Link: https://tryhackme.com/r/room/windowseventlogs

Wireshark: The Basics - THM Walkthrough by Nisha

Room Link: https://tryhackme.com/r/room/wiresharkthebasics Learning Objectives Task 1 - Introduction # Question: Which file is used to simulate the screenshots? Answer: …

Linux Fundamentals I - TryHackMe Walkthrough By Nisha

Embark on the journey of learning the fundamentals of Linux. Learn to run some of the first essential commands on an interactive terminal..

Content Discovery - THM Walkthrough by Nisha

Room Link: https://tryhackme.com/r/room/contentdiscovery In cybersecurity, discovering hidden or non-obvious content on web servers is critical for any aspiring ethical …

Meow - HTB Walkthrough by Nisha

Room Link: https://app.hackthebox.com/starting-point?tier=0 Task 1 - #Task 2 - #Task 3 - #

Walking An Application - THM Walkthrough by Nisha

Room Link: https://tryhackme.com/r/room/walkinganapplication In the "Walking An Application" room on TryHackMe, you will learn how to manually assess a web application …

The Art of Reconnaissance in Cybersecurity

The Art of Reconnaissance: A Critical Tool in Cybersecurity # Welcome to Day 4 of my 100 Days of Cybersecurity Challenge. As I progress through this intensive learning …

Introduction to Offensive Security - THM Walkthrough by Nisha

Room Link: https://tryhackme.com/r/room/introtooffensivesecurity Task 1 - What is Offensive Security? # Question: Which of the following options better represents the …

Vulnerability Scanning Nessus

Vulnerability Scanning with Tenable Nessus #🚀 Day 3 of my #100DaysOfCybersecurity challenge is all about getting hands-on with Tenable Nessus! 🕵️‍♂️

How to Create Configure a DMZ on Palo Alto FIrewall

Configuring a DMZ Zone and Policy Using Palo Alto Firewall #On Day 2 of my #100DaysofCybersecurity challenge, I focused on enhancing defenses by making progress on my …

Vulnerability Scanning With Nmap Network Scanning

Vulnerability Scanning with Nmap: Network Scanning # What is Nmap and which problems does it solve in Cybersecurity? Nmap (Network Mapper) is a powerful open-source …

How to Configure DNS Settings in Microsoft Azure

How to Configure DNS Settings in Microsoft Azure # Lab Guide from Microsoft Learning

Create Virtual Networks In Azure

Create Virtual Networks (VNets) in Azure # Lab Guide from Microsoft Learning

Identity And Access Management Azure Policy

IAM: Configure Azure Policy #

Identity And Access Management Resource Manager Locks In Azure

IAM: Create Resource Manager Locks in Azure #

Identity And Access Management Role Based Access Control

IAM: Configure Role-Based Access Control (RBAC) in Azure #

Incident Handling With Splunk / Splunk 201 (TryHackMe Walkthrough)

Learn to use Splunk for incident handling through interactive scenarios. # Room: https://tryhackme.com/r/room/splunk201 Learning Objectives and Pre-requisites Before …

Splunk Basics / Splunk 101 (TryHackMe Walkthrough)

Room Link: https://tryhackme.com/room/splunk101 Learning Objectives and Pre-requisites If you are new to SIEM, please complete the Introduction to SIEM. This room covers …

Vulnerability Scanning With Openvas Unveiling Cybersecurity Insights

Vulnerability Scanning with OpenVAS: Unveiling Cybersecurity Insights # In the ever-evolving landscape of cybersecurity, staying one step ahead of potential threats is …

Introduction to Defensive Security - THM Walkthrough by Nisha

Room Link: https://tryhackme.com/r/room/defensivesecurity Task 1 - Introduction to Defensive Security # Learning Objectives: Offensive security primarily aims at …

Windows Fundamentals 1 - TryHackMe Walkthrough

Room Link: Windows Fundamentals 1 - TryHackMe Walkthrough #

Configure Network Monitoring In Aws

Configure Network Monitoring in AWS #

Implement Security Controls In Aws

Implement Security Controls in AWS #

Enable Inter Vpc Connectivity With Aws Transit Gateway

Enable Inter-VPC Connectivity with AWS Transit Gateway #

Enable Inter Vpc Connectivity Using Peering Connections In Aws

Enable Inter-VPC Connectivity Using Peering Connections in AWS #

Aws Networking Multi Vpc Architecture

AWS Networking: Multi-VPC Architecture #

Introduction to AWS Identity and Access Management (IAM)

A beginner-friendly walkthrough of managing users, groups, and permissions in AWS Identity and Access Management (IAM).

How To Deploy A Secured Static Website On Aws

How to Deploy a Secured Static Website on AWS # How to Deploy a Secured Static Website on AWS

Deploy Amazon Connect Contact Center

Deploy an Amazon Connect Contact Center #++

Enable Session Stickiness Using An Application Load Balancer In Aws (Alb)

Enable Session Stickiness Using an Application Load Balancer (ALB) in AWS #

Deploy and Configure Azure Firewall and Rules to Allow/Deny Access to Certain Websites

Deploy and Configure Azure Firewall and Rules to Allow/Deny Access to Certain Websites # Fig.1 - Azure Premium Firewall Diagram | Image Source: Microsoft.com The Azure …

Deploy Azure Application Gateway to Direct Web Traffic

Deploy Azure Application Gateway to Direct Web Traffic #

Create Inbound NAT Rules to Connect to a Single VM in Azure (Port-Forwarding)

Create Inbound NAT Rules to Connect to a Single VM in Azure (Port-Forwarding) #

Configure Azure Load Balancer

Configure Azure Load Balancer #

Traffic Routing in Microsoft Azure with Network Virtual Appliacne (NVA)

Traffic Routing in Microsoft Azure with Network Virtual Appliacne (NVA) #

How to Create Site-to-Site VPN Connections in Microsoft Azure

Create a Site-to-Site (S2S) VPN Connection in Microsoft Azure #

How to Create Point-to-Site VPN Connections in Microsoft Azure

How to Create Point-to-Site VPN Connections in Microsoft Azure # Creating Azure Point to Site VPN Connections

Creating VNet-to-VNet Connections in Microsoft Azure

This walkthrough details how to create secure VPN Gateway connections between two Azure Virtual Networks using VNet-to-VNet tunneling. Learn how to configure VPN …