• Anonymous Kali setup on Mac

    Introduction Last week we setup a single Kali box as a daily driver. As promised, this week we take it a step further. The lab I built in July hands me an attacker box and two targets on an isolated segment, rebuilt from scratch with one command. Every VM in it still reaches the internet…

  • Metasploit EternalBlue, Hearthbleed, i.e.

    Introduction A while back I wrote a beginner Metasploit post where I popped a Metasploitable box. Since then I’ve kept poking at things, and a few features finally clicked. So here’s a more intermediate follow-up; two classic exploits, the shell upgrade trick I now use and the post-exploitation moves that make the framework feel like…

  • Automated lab setup on a Mac

    Introduction Last time I built a single Kali workstation on the Mac by hand: install the VM, update it, duplicate it, keep the clone clean. That’s fine when you need one attacker box. It stops being fine the moment you want a target to point it at, and then a second target, and then a…

  • Metasploit for beginners + hack a Linux box

    Introduction Short course I found on Coursera giving me some Metasploit basics. Already covered a lot on THM. Expanded quite a bit on this short course, to be able to present to you the below write up. Setup Create a lab with: I’m running on a Mac. Recon Find out what we’re working with. Note:…