Skip to main content

Posts

OverTheWire Bandit: Level 0-14

Bandit Levels Levels 0-14 Levels 14-25 Levels 25-33 Please use Ctrl+F to find your desired Level. Level 0 Bandit Level 0 Level Goal The goal of this level is for you to log into the game using SSH. The host to which you need to connect is bandit.labs.overthewire.org, on port 2220. The username is bandit0 and the password is bandit0. Once logged in, go to the Level 1 page to find out how to beat Level 1. Commands you may need to solve this level 2/31 ssh kali@kali:~$ ssh bandit0@172.9.9.176 -p 2220 password: bandit0 Level 0 -> Level 1 Level Goal The password for the next level is stored in a file called readme located in the home directory. Use this password to log into bandit1 using SSH. Whenever you find a password for a level, use SSH (on port 2220) to log into that level and continue the game. Commands you may need to solve this level ls, cd, cat, file, du, find Password for next level: boJ9jbbUNNfktd78OOpsqOltutMc3MY1 Level 1 -> Level 2 Level Goal The password for the next le

CEH v10 Write-up | Certified Ethical Hacker | 2020

On July 10th I passed the CEH with 105/125 questions right and this is the write up to the exam and certification. I got really interested in the CEH because it was a well known certification and the syllabus really interested me. I also had a ton of recommendations online and from people in this industry saying that the CEH was a really good beginner level security certification. Details about the exam and course: I bought the course from the EC-Council website. There are certain requirements if you want to take this certification. You should either have 2 years experience or buy their online iClass to attempt the exam. As I did not have the required experience I bought the online course. The EC-Council website and how everything works with them is very confusing and I got very confused at times. But thankfully, the customer support answered all my questions and guided me through the buying process and the registration. The course costs $1100 USD in India but I bought the course durin

Is CCNA a good way to get into CyberSecurity?

I passed the CCNA last year and I've seen this question asked a lot. So here's your answer. CCNA has little to do with Security and Security related beginner certifications like the Security+ and the CEH are better for Security related roles. But, to understand a lot of stuff in security you need a thorough understanding of networking concepts. You could just learn all of it for free on the internet, but certifications show a recruiter that you understand it and have been tested. Also, it looks really good on your resume. You will learn networking concepts that will help you when you start concentrating on Security. Topics like OSI layers and protocols, TCP/IP Model, TCP, UDP, IPv4, IPv6, ARP, DHCP, DNS,  MAC, Encryption, SSH, Telnet, FTP, NAT, SNMP, Routing and Switching protocols(OSPF, RIP, BGP etc). You will also learn key concepts in network security and general security like WiFi security protocols, ARP and DHCP attacks, threats, vulnerabilities, port securit

I wrote a Password Wordlist Generator in Python

As I am getting experience and writing simple programs in Python, I wanted to write a "hacking" related program. Not too hard, but not too simple. PasswordListGenerator I think I got the idea from watching a Mr Robot episode, Elliot creates a wordlist for cracking passwords. This gave me an idea and I thought I would do this! So I searched for similar programs to see if something like this existed and I found CUPP and BEWGor. These are absolutely beautiful. They are well written and provide many operations and options for creating a wordlist.   I took the idea of how these programs worked to create the wordlist and applied my version to do the same. Yes, it is not an original idea, but it is my implementation. I have to agree, the best way to get better at a programming language is to do a project. I posted a small GIF showing how the program works on Reddit and it got a good amount of reactions. Turns out, people actually give great advice and mot

Studying for the CEH (Certified Ethical Hacker)

Hey there! I got the CCNA last year and the CEH was the next step in my mindmap . I completed the CCNA December of 2019 and got caught up with college for a while. I started studying for the CEH around March 2020. Here are the resources and methods I'm using:  1. Matt Walker All-in-One for CEH  I bought the CEH All in One guide from Matt Walker and I've been studying from that. The book was recommended by a lot of people on Reddit and other forums. 2. Matt Walker CEH Practice Exams I bought this book too and intend to use it and solve a lot of questions so I get as much practice as I can. 3. Boson Exams I had a really good experience with Boson practice exams during the CCNA studies and I'm going to stick with them for the CEH also. Boson played a huge role when I passed the CCNA and hopefully it can do the same for CEH. 4. Practice on the actual thing As I actually want to learn using the tools I'm practicing the tools and methods us

Update! May 2020!

I haven't been actively blogging and I have updates! I thought I would stop blogging and work on a YouTube channel but I also want to keep this blog going. I am going to try to keep this blog active and I will document my journey in InfoSec. The Coronavirus has kept me at home and I've done so much but so little. Looks like its time to bring this blog back to life again. Thanks for reading! AZID