https://0x-s0M3n4th.github.io/ Recent content on 0x-s0M3n4th's Blog https://0x-s0M3n4th.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://0x-s0M3n4th.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.149.0 en-us Sat, 20 Jun 2026 05:54:30 +0530 https://0x-s0M3n4th.github.io/notes/system_administration/00-chapter-1/00-history-of-linux/ Sat, 20 Jun 2026 05:54:30 +0530 https://0x-s0M3n4th.github.io/notes/system_administration/00-chapter-1/00-history-of-linux/ <link rel="stylesheet" href="https://0x-s0M3n4th.github.io/css/vendors/admonitions.4fd9a0b8ec8899f2ca952048d255a569f433f77dfb3f52f5bc87e7d65cdce449.css" integrity="sha256-T9mguOyImfLKlSBI0lWlafQz9337P1L1vIfn1lzc5Ek=" crossorigin="anonymous"> <div class="admonition note"> <div class="admonition-header"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path d="M0 64C0 28.7 28.7 0 64 0L224 0l0 128c0 17.7 14.3 32 32 32l128 0 0 125.7-86.8 86.8c-10.3 10.3-17.5 23.1-21 37.2l-18.7 74.9c-2.3 9.2-1.8 18.8 1.3 27.5L64 512c-35.3 0-64-28.7-64-64L0 64zm384 64l-128 0L256 0 384 128zM549.8 235.7l14.4 14.4c15.6 15.6 15.6 40.9 0 56.6l-29.4 29.4-71-71 29.4-29.4c15.6-15.6 40.9-15.6 56.6 0zM311.9 417L441.1 287.8l71 71L382.9 487.9c-4.1 4.1-9.2 7-14.9 8.4l-60.1 15c-5.5 1.4-11.2-.2-15.2-4.2s-5.6-9.7-4.2-15.2l15-60.1c1.4-5.6 4.3-10.8 8.4-14.9z"/></svg> <span>Note</span> </div> <div class="admonition-content"> <p>In 1984 Richard Stallman, an American software engineer, had a goal to create a completely free UNIX-compatible open-source (non-proprietary) operating system. The initiative was called the GNU Project (GNU’s Not Unix) and by 1991. Then Linus Torvalds developed a kernel and proclaimed it&rsquo;s availability.</p> https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/01-lab-build/01-easy-to-setup-lab/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/01-lab-build/01-easy-to-setup-lab/ A quick guide to setting up a virtualized pentest environment using minimal resources. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/00-google-dorking--dns-enumeration/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/00-google-dorking--dns-enumeration/ Using Google search operators and DNS enumeration techniques to gather actionable intelligence. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/00-intro/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/00-intro/ Overview of Command and Control concepts, communication models, and operational roles. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/00-intro/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/00-intro/ Overview of the network penetration testing phase and workflow. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/00-intro/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/00-intro/ Overview of network penetration testing concepts, methodology, and scope. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/00-intro/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/00-intro/ Foundational concepts and objectives of the post exploitation phase. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/00-nessus/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/00-nessus/ Using Nessus for vulnerability scanning and report generation. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/00-intro-to-hacking/00-penetration-testing-phases/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/00-intro-to-hacking/00-penetration-testing-phases/ <h2 id="penetration-testing-basics">Penetration Testing basics:</h2> <p><img alt="pp_1" loading="lazy" src="https://0x-s0M3n4th.github.io/images/Pentesting/NP/pp/PP_1.png"></p> <h3 id="pre-engagement">Pre-engagement:</h3> <p><img alt="pp_2" loading="lazy" src="https://0x-s0M3n4th.github.io/images/Pentesting/NP/pp/PP_2.png"> <em>NDA:</em> An NDA is a legal agreement that specifies that a penetration tester and their employer will not share or hold onto any sensitive or proprietary information that is encountered during the assessment.</p> <p><em>RoE:</em> The scope of a penetration test, also known as the rules of engagement, defines the systems the penetration tester can and cannot hack. This ensures the penetration tester remains within legal boundaries.</p> https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/00-reconnaisance-basics/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/00-reconnaisance-basics/ Introduction to footprinting concepts and the critical difference between active and passive reconnaissance. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/00-understanding-active-directory/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/00-understanding-active-directory/ A foundational overview of AD components, structure, and security concepts. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/11-advanced-ad-attacks/00-understanding-kerberos/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/11-advanced-ad-attacks/00-understanding-kerberos/ A comprehensive explanation of the Kerberos authentication protocol used within AD. https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/ftk-imager/ Sun, 02 Nov 2025 19:50:00 +0530 https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/ftk-imager/ A step-by-step walkthrough of acquiring a disk image using Exterro&#39;s FTK Imager, a critical tool for digital forensics and incident response. https://0x-s0M3n4th.github.io/notes/blue-team-ops/00-wireshark/intro-to-wireshark/ Sun, 12 Oct 2025 11:26:03 +0530 https://0x-s0M3n4th.github.io/notes/blue-team-ops/00-wireshark/intro-to-wireshark/ A practical guide to using Wireshark for network analysis. https://0x-s0M3n4th.github.io/blogs/welcome/ Tue, 08 Jul 2025 04:14:54 -0800 https://0x-s0M3n4th.github.io/blogs/welcome/ <p>Welcome. If you&rsquo;re here, you&rsquo;re likely passionate about red teaming and the art of the technical write-up. This blog is my contribution to that community. I appreciate you taking the time to be here.</p> <hr> <p><strong>What You’ll Find Here</strong></p> <p><strong>Red Teaming Notes</strong></p> <p>I share real-world notes and tactics I’ve picked up through learning, labs, and exercises. Think of it as my personal “Field Manual” — from privilege escalation to lateral movement and beyond.</p> https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/11-advanced-ad-attacks/01-attacking-active-directory/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/11-advanced-ad-attacks/01-attacking-active-directory/ Core techniques and attack paths leveraged to compromise Active Directory environments. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/01-deep-passive-recon/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/01-deep-passive-recon/ Techniques for gathering intelligence and mapping targets without ever directly touching their infrastructure. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/01-enumerating-active-directory/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/01-enumerating-active-directory/ Techniques for performing AD enumeration using built-in, manual, and automated methods. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/01-enumerating-subdomains/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/01-enumerating-subdomains/ Techniques and tools to discover subdomains for expanding the attack surface. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/01-gaining-a-shell-with-pth-winexe-impacketxfreerdp/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/01-gaining-a-shell-with-pth-winexe-impacketxfreerdp/ Using various tools to gain remote shells through pass-the-hash and RDP-based approaches. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/01-misconfiguring-ssh-on-windows-server/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/01-misconfiguring-ssh-on-windows-server/ Understanding insecure SSH setups on Windows Server and their impact. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/01-usecases-of-c2/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/01-usecases-of-c2/ Real-world applications and scenarios where C2 frameworks are leveraged. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/01-vulnerability-discovery-using-nmap/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/01-vulnerability-discovery-using-nmap/ Leveraging Nmap NSE scripts to uncover vulnerabilities. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/01-working-with-bind-and-reverse-shells/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/01-working-with-bind-and-reverse-shells/ Understanding bind and reverse shells and how attackers leverage them for access. https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/tcpdump/ Wed, 05 Nov 2025 20:15:00 +0530 https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/tcpdump/ A step-by-step walkthrough of capturing and filtering network traffic using tcpdump, a fundamental command-line tool for packet analysis. https://0x-s0M3n4th.github.io/blogs/blog_1/ Sun, 19 Oct 2025 18:45:11 +0530 https://0x-s0M3n4th.github.io/blogs/blog_1/ <p>This is going to be a very raw blog, mostly about what I am going to post in the next few months, and what I have been doing for the past few weeks.</p> <p>So, <em>let&rsquo;s start with what I was doing&hellip;</em></p> <p>After completing <code>eJPT</code> certification and learning the basics as well as core concepts of <code>system administration</code>, I got my hands dirty on <code>CTF platforms</code> like <code>HTB</code>. I took a one-month subscription just to get the experience of it. But not gonna lie, it was not what I expected. First of all, playing <code>CTFs</code> on these platforms are very good for many people, and the platforms do a great job. But I didn&rsquo;t like the <code>CTFish</code> or more like <code>obviously vulnerable</code> experience. I thought the normal HTB boxes would replicate real-world scenarios—hardened systems where normal scans easily fail, and where initial access depends on phishing, social engineering, or hardcore OSINT rather than an obvious open port. That wasn&rsquo;t what I found. But definately <code>HTB</code> is a great platform for sharpening your skills under time pressure.</p> https://0x-s0M3n4th.github.io/notes/blue-team-ops/01-snort/intrusion-detection-with-snort/ Sun, 12 Oct 2025 12:17:03 +0530 https://0x-s0M3n4th.github.io/notes/blue-team-ops/01-snort/intrusion-detection-with-snort/ A practical guide to use Snort. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/02-anti-mlaware-evasion-techniques/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/02-anti-mlaware-evasion-techniques/ Techniques for bypassing anti-malware detection during payload deployment. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/02-bloodhound/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/02-bloodhound/ Using BloodHound to analyze AD relationships and discover privilege escalation paths. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/11-advanced-ad-attacks/02-domain-dominance-and-persistence/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/11-advanced-ad-attacks/02-domain-dominance-and-persistence/ Achieving long-term persistence and complete domination of an AD domain. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/02-gaining-access-by-exploiting-ssh/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/02-gaining-access-by-exploiting-ssh/ Techniques for compromising SSH services using weak configurations or credentials. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/02-post-exploitation-using-meterpreter/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/02-post-exploitation-using-meterpreter/ Leveraging Meterpreter sessions for internal reconnaissance and privilege escalation. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/02-profiling-websites-using-eyewitness/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/02-profiling-websites-using-eyewitness/ Capturing screenshots and metadata from web targets using EyeWitness. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/02-proxychains/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/02-proxychains/ How to configure and use Proxychains to route your hacking tools through intermediate servers. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/02-c2-operation-setup/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/02-c2-operation-setup/ Steps to build, configure, and secure C2 infrastructure for Red Team operations. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/02-working-with-greenbone-vuln-manager/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/02-working-with-greenbone-vuln-manager/ Using Greenbone/OpenVAS for enterprise-grade vulnerability scanning. https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/linux-forensics/ Thu, 06 Nov 2025 19:00:00 +0530 https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/linux-forensics/ A simple walkthrough of checking command history and system logs for suspicious activity. https://0x-s0M3n4th.github.io/notes/blue-team-ops/02-wazuh/00-introduction-+-installation/ Sun, 12 Oct 2025 12:48:03 +0530 https://0x-s0M3n4th.github.io/notes/blue-team-ops/02-wazuh/00-introduction-+-installation/ A practical guide to use Wazuh. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/03-active-scanning-techniques/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/03-active-scanning-techniques/ Understanding active scanning methods to discover open services and vulnerabilities. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/03-tor/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/03-tor/ Leveraging The Onion Router (TOR) service for anonymous communication and scanning. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/03-creating-custom-payloads-with-shelter/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/06-understading-network-pentesing/03-creating-custom-payloads-with-shelter/ Using Shelter to generate custom payloads capable of bypassing defenses. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/03-exploiting-rdp/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/03-exploiting-rdp/ Methods for exploiting Remote Desktop Protocol weaknesses to gain system access. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/03-lateral-movement-and-pivoting/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/03-lateral-movement-and-pivoting/ Techniques to expand access by moving laterally and pivoting across segmented networks. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/03-leveraging-network-based-trust/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/10-active-directory-attacks/03-leveraging-network-based-trust/ Abusing inter-domain and network-based trust relationships for privilege escalation. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/03-using-web-application-scanners/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/05-vulnerability-assessment/03-using-web-application-scanners/ Scanning web applications using tools like nmap, metaploit. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/03-working-with-starkiller/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/09-command-and-control-tactics/03-working-with-starkiller/ Using Starkiller as a GUI for Covenant C2 to manage beacons and operations. https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/windows-forensics/ Sat, 08 Nov 2025 20:15:00 +0530 https://0x-s0M3n4th.github.io/notes/miscellaneous/int-250/windows-forensics/ An introduction to viewing basic Windows artifacts like Recent files and Registry entries, Network informations etc. https://0x-s0M3n4th.github.io/notes/blue-team-ops/03-suricata/00-installation--rule-creation/ Sun, 12 Oct 2025 12:48:03 +0530 https://0x-s0M3n4th.github.io/notes/blue-team-ops/03-suricata/00-installation--rule-creation/ A practical beginner-friendly guide to Suricata with custom detection rules including ARP spoofing and SSH brute-force logging. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/04-live-host-discovery/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/04-live-host-discovery/ Techniques to identify active hosts within internal and external networks. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/04-mitm-attacks/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/04-mitm-attacks/ Man-in-the-Middle attacks used for credential stealing, sniffing, and session hijacking. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/04-probing-open-services-ports-and-os/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/04-probing-open-services-ports-and-os/ Identifying open ports, services, and operating systems during reconnaissance. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/04-information-gathering-techniques-using-whois-recon-ng/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/04-information-gathering-techniques-using-whois-recon-ng/ Using Whois lookups for registration data and the Recon-ng framework for automated modular reconnaissance. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/05-dns-tunneling/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/05-dns-tunneling/ Using DNS tunneling to bypass firewalls and exfiltrate data over DNS queries. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/05-evasion-techniques/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/05-evasion-techniques/ Methods for bypassing detection while performing scans and enumeration. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/05-identifying-and-exploiting-vulnerable-services/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/05-identifying-and-exploiting-vulnerable-services/ Techniques for discovering and attacking vulnerable network-exposed services. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/05-the-harvester/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/05-the-harvester/ Automating the collection of emails, subdomains, and employee names from public search engines. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/06-bgp-hijack/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/08-post-exploitation-techniques/06-bgp-hijack/ Understanding how attackers manipulate BGP routes for interception and traffic redirection. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/06-social-media-recon/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/02-reconnaissance/06-social-media-recon/ Extracting actionable intelligence and building profiles from social media platforms (SOCMINT). https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/06-spoofind-mac-and-ip-address/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/06-spoofind-mac-and-ip-address/ Techniques to spoof MAC and IP addresses for stealth in network engagements. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/06-winrm-configuration-on-win-server-2019/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/06-winrm-configuration-on-win-server-2019/ Configuring Windows Remote Management (WinRM) securely and understanding its weaknesses. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/07-enumerating-common-network-services/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/07-enumerating-common-network-services/ Gathering information from popular network services like SMB, FTP, SSH, etc. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/07-winrm-exploitation/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/07-winrm-exploitation/ Techniques for exploiting misconfigured WinRM services to obtain system access. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/08-setting-up-modern-vulnerable-elastic-search/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/08-setting-up-modern-vulnerable-elastic-search/ Deploying intentionally vulnerable ElasticSearch instances for practice and testing. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/08-performing-user-enum-using-noise-authentication/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/08-performing-user-enum-using-noise-authentication/ Performing user enumeration by exploiting authentication noise patterns. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/09-exploiting-elastic-search-misconfigs/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/09-exploiting-elastic-search-misconfigs/ Identifying and exploiting common ElasticSearch misconfiguration vulnerabilities. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/09-finding-data-leaks-on-the-cloud/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/04-active-information-gathering/09-finding-data-leaks-on-the-cloud/ Identifying publicly exposed cloud resources and misconfigured services. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/10-snmp-misconguration/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/10-snmp-misconguration/ Discovering insecure SNMP configurations and assessing exposure risks. https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/11-snmp-exploitation/ Mon, 24 Nov 2025 13:25:00 +0530 https://0x-s0M3n4th.github.io/notes/pen-testing-notes/network-pentesting/07-performing-network-penetration-testing/11-snmp-exploitation/ Techniques for exploiting SNMP weaknesses to extract sensitive network information. https://0x-s0M3n4th.github.io/notes/miscellaneous/int-244/mac-address-spoofing/ Sun, 02 Nov 2025 20:24:00 +0530 https://0x-s0M3n4th.github.io/notes/miscellaneous/int-244/mac-address-spoofing/ A quick, hands-on guide to understanding and performing MAC address spoofing for network testing. https://0x-s0M3n4th.github.io/portfolio/ Mon, 01 Jan 0001 00:00:00 +0000 https://0x-s0M3n4th.github.io/portfolio/ System Administration, Blue Teaming, and Red Team Operations. https://0x-s0M3n4th.github.io/table-of-contents/ Mon, 01 Jan 0001 00:00:00 +0000 https://0x-s0M3n4th.github.io/table-of-contents/ <h2 id="table-of-contents">Table of Contents</h2> <h3 id="blogs">Blogs</h3> <ul> <li><a href="https://0x-s0M3n4th.github.io/blogs/welcome/">My First Blog</a></li> <li><a href="https://0x-s0M3n4th.github.io/blogs/blog_1/">Blog 1</a></li> </ul> <h3 id="notes">Notes</h3> <ul> <li><a href="https://0x-s0M3n4th.github.io/notes/blue-team-ops/00-wireshark/intro-to-wireshark/">Practical Wireshark</a></li> <li><a href="https://0x-s0M3n4th.github.io/notes/blue-team-ops/01-snort/intrusion-detection-with-snort/">Practical Snort</a></li> <li><a href="https://0x-s0M3n4th.github.io/notes/blue-team-ops/02-wazuh/00-introduction-&#43;-installation/">Practical Wazuh</a></li> </ul>