-
Optimising for success, either via stealth or speed. Timing templates vs specified delays / timeouts… Output formats are next, followed by a quick look at Zenmap too.
-
Second lab time, with the best tools listed for this lab being: So I start with checking out where I am and what I’m scanning.ifconfig gives me my IP and subnet, a quick scan on that with nmap -sn <subnet> tells me I’m going to be looking at 192.244.169.3 (aka target.ine.local). Flag 1: The server…
-
Had a good introduction into the NSE today. I also had a play about with some lab environments to do some scanning. Those UDP scans are *slow*! Got a Footprinting & Scanning ‘CTF’ coming up next. I imagine it’ll be a long one that will involve a write-up like my Assessment Methodologies one did.
-
Port scanning, service version & OS detection, tweaking the service enumeration intensity level… Just which version of Linux is running on the target anyway? SYN scan > TCP Full scan Taking a look at the Nmap scripting engine next time.
-
Liking the options so far, nice and simple, just learning the ropes.
-
Transport Layer today, nice bit of TCP & UDP. Now that’s complete it’s on to the host discovery techniques, starting with more Nmap.
-
Checking back in with some networking fundamentals, then a bit of a deeper look at the Network layer.
-
So here is the first lab. I completed it yesterday (21/02/2026) but wanted to repeat it and take notes on it this time. Flag 1: This tells search engines what to avoid and what not to crawl. From the training video regarding website recon & footprinting, we should know to look at the contents of…
-
A bit disappointed, to be honest… The content taught thus far brought me to the first two flags easily enough when I referred to my notes. Flags 3 & 4 required me to refer to write-ups others have done, as the initial module did not discuss dirb, nor curl. Leveraging grep got me the last…
-
Basic host discovery and port scanning huh, let’s do it -p-