Welcome! Hi there! I’m Loganathan Mani (Logan), a Junior Penetration Tester (eJPT certified) with 9+ years of enterprise IT experience at Accenture. I’m based in Sydney, Australia (PR holder - Sub...

Backend is a medium-difficulty Linux machine from HackTheBox that teaches you how to exploit API vulnerabilities. The box doesn’t have a traditional website frontend, just a backend API. We’ll fuzz...

Jarvis is a medium-difficulty Linux machine from HackTheBox. We’ll exploit SQL injection to get a foothold, use command injection for lateral movement and leverage a misconfigured SUID binary to ge...

Intelligence is a medium-difficulty Windows machine from HackTheBox that focuses on Active Directory exploitation. This box teaches you about PDF metadata analysis, password spraying, ADIDNS poison...

Machine Info Difficulty: Medium OS: Windows IP: 10.129.96.155 Domain: megabank.local TL;DR Found default credentials in LDAP description field, sprayed the password across domain users to gain i...

Machine Info Difficulty: Hard OS: Windows IP: 10.129.229.17 Domain: BLACKFIELD.local Initial Recon Started with a full port scan to see what services were running: nmap -p- --min-rate=1000 -T...

BloodHound collects information about Active Directory. User accounts. Computer accounts. Group memberships. Who can log into what. Who has admin rights where. Trust relationships. All of it. Then...

Installing Chisel On Kali Linux: sudo apt update sudo apt install chisel -y Verify the installation: chisel --version You should see something like: chisel version 1.9.1 Getting the Clien...

Network pivoting is one of those skills every pentester needs to master. You compromise one machine but the real treasure is sitting on an isolated internal network. That’s where Ligolo-ng comes in...

The Coffee Shop Automation Gone Wrong ☕ Picture this: You walk into your favorite coffee shop. There’s a shiny new automated ordering system. You type “large cappuccino” and boom - your coffee arr...