In this detailed tutorial, we will explain what Nmap is, why it's used, how to install it, and walk through the most important Nmap commands every network admin and security professional should know.

Elf McSkidy managed to capture the logs generated by the web server. What is the name of this log file? Find the website's source code (repository) on github.com and open the file containing sensitive ...

In this second post of a five-part series, I provide advice on how to best utilize the PEN-200 course material for a successful career in ethical hacking. “One hour per day of study in your chosen ...

What is the name of the PHP file accessed by the attacker via the cat command after gaining successful code execution on web01? Using the process ID of malicious reg.exe execution, what is the value ...

Today I’m going to explore and demonstrate an old tool called nfsshell and tell you why it’s still pretty killer in some testing situations. Nfsshell is one of those incredibly useful but little known ...

BackTrack 5, code named “Revolution”, the much awaited penetration testing framework, was released in May 2011. It is a major development over BackTrack4 R2. BackTrack 5 is said to be built from ...

The current incarnation of OpenVAS will only run on UNIX-like systems, and is extensively tested on Linux-based systems. The following examples and screenshots show OpenVAS running on BackTrack 5. To ...