Skip to main content

Posts

PNPT Certification and Exam

I needed a second attempt for the TCM PNPT exam because I underestimated the importance of enumeration. I skimmed through it the first time, and that was a big mistake. Enumeration is the key! If you don’t get that part right, everything else becomes much harder. The Practical Network Penetration Tester (PNPT) exam by TCM Security is one of the best hands-on penetration testing certifications out there. Unlike traditional multiple-choice exams, it simulates a real-world pentest engagement, requiring critical thinking, exploitation skills, and a well-documented report. It’s a challenge, but if you prepare properly, it’s very doable. To prepare, I started with the Practical Ethical Hacking (PEH) course, which lays the foundation. It covers networking, Active Directory exploitation, OSINT, web attacks, and post-exploitation techniques. Everything in the PNPT exam is based on what’s taught in PEH, so taking the time to understand these concepts is essential. I also went through the Exter...
Recent posts

Decrypting the Secret Behind Password Security

Password security is more important than ever. With cyber threats on the rise, it's crucial to understand how passwords can be cracked. This blog post explores password security, discusses the power of Hashcat in cracking passwords, and provides tips for keeping your passwords safe. Passwords are the first line of defense against unauthorized access to your personal and professional data. Despite their importance, many people still use weak or easily guessable passwords, making them prime targets for hackers. A strong password is critical to safeguarding sensitive information and preventing data breaches. Understanding Password Complexity When it comes to password complexity, the goal is simple: to create passwords that are hard for hackers to crack but easy enough for us to remember. But what exactly makes a password complex? Let's take a look at an example: "asdajh982743!@#!(hb91@YH#". At first glance, it seems pretty complex with its mix of letters, numbers, and sp...

SANS Work Study Program - As a facilitator

Last week, I had chance to follow the SEC504: Hacker  Techniques, Exploits and Incident Handling, which took place  in Sydney from 6th May until 11th May. Initially I was very hesitant on attending as SANS Work Study program. However, after completing the seven-day work-study facilitator program, I can confidently say it was one of the best decisions I've made. The experience was not only enriching but also left me with zero regrets. If given another chance, I would absolutely do it again. I attended the event as an in-person facilitator for SANS. to those that do not know what that is, it is an opportunity to attend the course on a discounted fee; in return all that is required from you is to assist the SANS Event managers and the instructors for the duration of the event. Official information here . SEC504: Hacker Tools, Techniques, and Incident Handling In this post I wont discuss details on the course curriculum; That can be viewed on the official page here . Learning from...