HTB Certified Machine Completion Machine Summary As directly stated within the machine’s notes: “As is common in Windows pentests, you will start the Certified box with credentials for the follow...

When copying over only select folders from one Obsidian vault to another the attachments do not get copied over with the notes. Going through each note and manually copying and pasting the missing ...

Damn Vulnerable AWS (aka AWSGoat) Setup Damn Vulnerable AWS aka AWSGoat contains two (2) vulnerable by-design AWS infrastructures. This blog post is intended to part one of a two-part series. This ...

Overview This post is intended to serve as my personal writeup for the HTB machine Usage. HTB Usage Rank Machine Summary The Usage machine starts with exploiting a SQL injection (SQLi) vulnerabi...

Table of Contents What are Password Managers Create your Bitwarden Account Add New Items Using the Auto-Fill Feature Update your Existing Accounts Bitwarden on your Mobile Device Int...

Introduction to GOAD Game of Active Directory (GOAD), an open-source lab by Orange-Cyberdefense, is intended to “give PenTesters a vulnerable Active directory environment” to practice common AD att...

Overview This is intended to serve as a walkthrough for HackTheBox’s Authority machine and general practice for writing PenTest reports. HTB Authority: 112th Person to PWN Machine Summary The Pe...

Brief Intro About Myself My name is Ethan Tomford and I am an aspiring offensive security specialist. I am about to obtain my Bachelor of Science in Computer Information Systems: Cybersecurity. I w...

Welcome to my Blog This is my first post on my new information security blog. I am hoping to have a plethora of posts documenting various things throughout my InfoSec journey. Credit: I must giv...