Matthew learns Pentesting/EH

 This was a fairly simple exercise. Important parts not in the pictures are Lists are always in brackets "[]" and numbering starts at 0. So be mindful your first item in a list is 0 not 1  Feel free to contact me on  LinkedIn  or  Twitter

Today was pretty fun. It was a simple lesson but one I think will be handy. I am a huge math geek. My 3 year old and I randomly add the numbers we see on the street and he is getting to the point he can do his multplication tables up to 10 already. So learning that python can do math by scripting it makes sense but I can also see how that might be handy in the future when I am writing more advanced scripts for vulnerabilities in a system. As I am sure I have said pentesting isnt where I want to stop. I want to go full red team and overall I want to be good at as much in cyber as possible. I mean the goal is to do as much good with this knowledge as possible so learning scripting on all angles would make me more effective but anyways, we did some simple scripting for math and it sounded like we will get to the more advanced in a later lesson.  Check it out and if you know of some simple scripts I can add to my math knowledge let me know I would love to give it a try. Feel free to re...

 Ok so today's is one of those things where I am not proud it took so long but I am proud that I finally came up with a solution.  On pentesterlab I have been trying for a couple hours to use burp repeater to do a file upload injection but for some reason it wouldn't work. So, I decided to switch to using OWASP Zap to try on that tool and it didn't work.  I started getting frustrated and decided I would step back and try and think about a different way to do things. Then I realized all I was trying to do was rename a file from test.php to test.php3 and upload it and repeater was just stopping me from having to rewrite the file on my desktop. SO, I figured I had already written the php code, so I went in copied what was in the file and created a new file with the test.php3 name and uploaded it the regular way. Now I know this is not the way pentesterlab has it set up BUT.... I would argue this. I spent probably 3 hours trying to do it their way. And time and again in the l...

 So, I have stated that when I am stuck, I take a step back for a few minutes, but I wanted to explain that I don't just go and do nothing.  True there are times when I go play with my son or cook my family lunch, or whatever. But for me my learning right now is to a point that I feel like I need it for my sanity. But on the same hand when I get stuck on something that, maybe I think I shouldn't it drives me nuts, LOL. I have high expectations of myself, so I can get hard on myself when I don't immediately get something. But back to the topic. Let's take this morning for example, I was working through what should have been an easy task on  PentesterLab , but one of my computers is down so I am working on the one I never installed VIM on, which this exercise called for. I thought no problem how hard can it be to install VIM on Windows. And I was correct it wasn't that hard. I started going through the task and it wasn't working, and I couldn't tell why. So, I...

 So today I was working on the exercise "Server Side Template Injection 01" on  Pentesterlab . I try and do all my exercises on both laptops at the same time. This does 2 thing for me; 1) I get to see how it works on 2 different systems a windows in the Edge browser and a Chromebook in the Chrome browser. I got this idea after I had to switch on one exercise and noticed subtle differences. While this seems like common sense for some reason it was something I never thought about before. So from that point forward I thought more exposure is good so I solve all the exercises on both.  2) I can solve on one while watching the walk through video on the other. For me it is easier and clicks in my head better if I don't have to watch, pause, execute, watch, pause, execute. But back to my point while watching the video I kept getting frustrated cause I thought I was doing exactly what he was doing. I switched back and forth between computers, restarted 3x's, stepped away and ...