# Nathaniel Cyber Security

## Nathaniel Cyber Security

- [About Me](https://docs.wehost.co.in/readme.md): Nathaniel Fernandes
- [Homelab](https://docs.wehost.co.in/homelab.md)
- [Change SSH Port](https://docs.wehost.co.in/homelab/change-ssh-port.md): Change SSH Port
- [Install Docker Ubuntu](https://docs.wehost.co.in/homelab/install-docker-ubuntu.md): Install Docker Ubuntu
- [Portainer](https://docs.wehost.co.in/homelab/portainer.md): docker management tool
- [Install Active Directory](https://docs.wehost.co.in/homelab/install-active-directory.md)
- [Setting up Wireguard](https://docs.wehost.co.in/homelab/setting-up-wireguard.md): just a place to documenting my homelab
- [Managing WireGuard Logs with Systemd and Logrotate 🔥](https://docs.wehost.co.in/homelab/managing-wireguard-logs-with-systemd-and-logrotate.md)
- [Cloudflare Tunnels: The Cybersecurity Pro's Secret Weapon for Secure Cloud Access](https://docs.wehost.co.in/homelab/cloudflare-tunnels-the-cybersecurity-pros-secret-weapon-for-secure-cloud-access.md)
- [🧠💥 How I Routed My Entire Lab's HTB Traffic Through a Single VPN Box](https://docs.wehost.co.in/homelab/how-i-routed-my-entire-labs-htb-traffic-through-a-single-vpn-box.md)
- [Opening SSH with Root Access to the World: A Controlled Honeypot Experiment](https://docs.wehost.co.in/homelab/opening-ssh-with-root-access-to-the-world-a-controlled-honeypot-experiment.md)
- [CyberSecurity](https://docs.wehost.co.in/cybersecurity.md)
- [Insecure Direct Object References (IDOR)](https://docs.wehost.co.in/cybersecurity/insecure-direct-object-references-idor.md)
- [HTTP Verb Tampering](https://docs.wehost.co.in/cybersecurity/http-verb-tampering.md)
- [SSH Attack](https://docs.wehost.co.in/cybersecurity/ssh-attack.md)
- [Basic Bash](https://docs.wehost.co.in/cybersecurity/basic-bash.md): basic bash commands used in cybersecurity
- [Nmap](https://docs.wehost.co.in/cybersecurity/nmap.md)
- [DNS Attacks](https://docs.wehost.co.in/cybersecurity/dns-attacks.md)
- [DNS Zone Transfer Attack](https://docs.wehost.co.in/cybersecurity/dns-attacks/dns-zone-transfer-attack.md)
- [IMAP & POP Attack](https://docs.wehost.co.in/cybersecurity/imap-and-pop-attack.md)
- [SMTP](https://docs.wehost.co.in/cybersecurity/smtp.md)
- [SMTP Attacks](https://docs.wehost.co.in/cybersecurity/smtp/smtp-attacks.md)
- [SMB Attack](https://docs.wehost.co.in/cybersecurity/smb-attack.md)
- [NFS Attacks](https://docs.wehost.co.in/cybersecurity/nfs-attacks.md)
- [SNMP Attack](https://docs.wehost.co.in/cybersecurity/snmp-attack.md)
- [MYSQL attacks](https://docs.wehost.co.in/cybersecurity/mysql-attacks.md)
- [IPMI](https://docs.wehost.co.in/cybersecurity/ipmi.md)
- [SSL Attacks](https://docs.wehost.co.in/cybersecurity/ssl-attacks.md)
- [Transferring Files](https://docs.wehost.co.in/cybersecurity/transferring-files.md)
- [Linux Configured WebServer with Upload](https://docs.wehost.co.in/cybersecurity/linux-configured-webserver-with-upload.md)
- [PowerShell Web Downloads](https://docs.wehost.co.in/cybersecurity/powershell-web-downloads.md)
- [Personal web server](https://docs.wehost.co.in/cybersecurity/personal-web-server.md)
- [Windows Authentication Process](https://docs.wehost.co.in/cybersecurity/windows-authentication-process.md)
- [Attacking SAM](https://docs.wehost.co.in/cybersecurity/attacking-sam.md)
- [CrackMapExec](https://docs.wehost.co.in/cybersecurity/crackmapexec.md)
- [Attacking LSASS](https://docs.wehost.co.in/cybersecurity/attacking-lsass.md)
- [Create SMB server Linux (HACK)](https://docs.wehost.co.in/cybersecurity/create-smb-server-linux-hack.md)
- [Pypykatz](https://docs.wehost.co.in/cybersecurity/pypykatz.md)
- [Attacking Active Directory & NTDS.dit](https://docs.wehost.co.in/cybersecurity/attacking-active-directory-and-ntds.dit.md)
- [Evil-WinRM](https://docs.wehost.co.in/cybersecurity/evil-winrm.md)
- [WinRM Attacks](https://docs.wehost.co.in/cybersecurity/winrm-attacks.md)
- [Active Directory Terminology](https://docs.wehost.co.in/cybersecurity/active-directory-terminology.md)
- [Active Directory Objects](https://docs.wehost.co.in/cybersecurity/active-directory-objects.md)
- [Active Directory](https://docs.wehost.co.in/cybersecurity/active-directory.md)
- [Active Directory Functionality](https://docs.wehost.co.in/cybersecurity/active-directory-functionality.md)
- [NTLM Authentication](https://docs.wehost.co.in/cybersecurity/ntlm-authentication.md)
- [Active Directory Rights and Privileges](https://docs.wehost.co.in/cybersecurity/active-directory-rights-and-privileges.md)
- [Pass the Ticket (PtT)](https://docs.wehost.co.in/cybersecurity/pass-the-ticket-ptt.md)
- [Kerberos](https://docs.wehost.co.in/cybersecurity/kerberos.md)
- [Pass the Ticket (PtT) from Windows](https://docs.wehost.co.in/cybersecurity/pass-the-ticket-ptt-from-windows.md)
- [FTP Bounce Attack](https://docs.wehost.co.in/cybersecurity/ftp-bounce-attack.md)
- [MSSQL Attacks](https://docs.wehost.co.in/cybersecurity/mssql-attacks.md)
- [RDP Attack](https://docs.wehost.co.in/cybersecurity/rdp-attack.md)
- [crowbar](https://docs.wehost.co.in/cybersecurity/crowbar.md)
- [Local File Inclusion (LFI)](https://docs.wehost.co.in/cybersecurity/local-file-inclusion-lfi.md)
- [Remote File Inclusion (RFI)](https://docs.wehost.co.in/cybersecurity/remote-file-inclusion-rfi.md)
- [Linux Shared Libraries Attacks](https://docs.wehost.co.in/cybersecurity/linux-shared-libraries-attacks.md)
- [Linux Shared Object Hijacking](https://docs.wehost.co.in/cybersecurity/linux-shared-object-hijacking.md)
- [Microsoft Guide to all Windows command](https://docs.wehost.co.in/cybersecurity/microsoft-guide-to-all-windows-command.md)
- [Windows Event Log Readers](https://docs.wehost.co.in/cybersecurity/windows-event-log-readers.md)
- [Windows DnsAdmins Attacks](https://docs.wehost.co.in/cybersecurity/windows-dnsadmins-attacks.md)
- [Hyper-V Administrators Attacks](https://docs.wehost.co.in/cybersecurity/hyper-v-administrators-attacks.md)
- [Windows Print Operators](https://docs.wehost.co.in/cybersecurity/windows-print-operators.md)
- [Windows Server Operators](https://docs.wehost.co.in/cybersecurity/windows-server-operators.md)
- [Windows User Account Control Bypass](https://docs.wehost.co.in/cybersecurity/windows-user-account-control-bypass.md)
- [Extracting Clipboard data Windows](https://docs.wehost.co.in/cybersecurity/extracting-clipboard-data-windows.md)
- [Windows Credential Hunting](https://docs.wehost.co.in/cybersecurity/windows-credential-hunting.md)
- [Cmdkey Saved Credentials](https://docs.wehost.co.in/cybersecurity/cmdkey-saved-credentials.md)
- [Retrieving Saved Credentials from Chrome windows](https://docs.wehost.co.in/cybersecurity/retrieving-saved-credentials-from-chrome-windows.md)
- [Extracting KeePass Hash](https://docs.wehost.co.in/cybersecurity/extracting-keepass-hash.md)
- [Online Hash Crackers](https://docs.wehost.co.in/cybersecurity/online-hash-crackers.md)
- [Hashcat](https://docs.wehost.co.in/cybersecurity/hashcat.md)
- [Creating Custom wordlists](https://docs.wehost.co.in/cybersecurity/creating-custom-wordlists.md)
- [Extracting windows wifi password](https://docs.wehost.co.in/cybersecurity/extracting-windows-wifi-password.md)
- [Wordpress Attacks](https://docs.wehost.co.in/cybersecurity/wordpress-attacks.md)
- [Joomla Attacks](https://docs.wehost.co.in/cybersecurity/joomla-attacks.md)
- [Drupal Attack](https://docs.wehost.co.in/cybersecurity/drupal-attack.md)
- [Tomcat Attacks](https://docs.wehost.co.in/cybersecurity/tomcat-attacks.md)
- [Jenkins Attacks](https://docs.wehost.co.in/cybersecurity/jenkins-attacks.md)
- [Splunk Attacks](https://docs.wehost.co.in/cybersecurity/splunk-attacks.md)
- [PRTG Network Monitor Attacks](https://docs.wehost.co.in/cybersecurity/prtg-network-monitor-attacks.md)
- [Gitlab Attacks](https://docs.wehost.co.in/cybersecurity/gitlab-attacks.md)
- [Tomcat CGI Attacks](https://docs.wehost.co.in/cybersecurity/tomcat-cgi-attacks.md)
- [Attacking Thick Client Applications](https://docs.wehost.co.in/cybersecurity/attacking-thick-client-applications.md)
- [LLMNR Poisoning](https://docs.wehost.co.in/cybersecurity/llmnr-poisoning.md)
- [Inveigh](https://docs.wehost.co.in/cybersecurity/inveigh.md)
- [InveighZero](https://docs.wehost.co.in/cybersecurity/inveighzero.md)
- [Password Spraying - Making a Target User List ACTIVE Directory](https://docs.wehost.co.in/cybersecurity/password-spraying-making-a-target-user-list-active-directory.md)
- [Kerbrute](https://docs.wehost.co.in/cybersecurity/kerbrute.md)
- [statistically-likely-usernames](https://docs.wehost.co.in/cybersecurity/statistically-likely-usernames.md)
- [linkedin2username](https://docs.wehost.co.in/cybersecurity/linkedin2username.md)
- [windapsearch](https://docs.wehost.co.in/cybersecurity/windapsearch.md)
- [Internal Password Spraying - from Linux ACTIVE Directory](https://docs.wehost.co.in/cybersecurity/internal-password-spraying-from-linux-active-directory.md)
- [Internal Password Spraying - from Windows ACTIVE Directory](https://docs.wehost.co.in/cybersecurity/internal-password-spraying-from-windows-active-directory.md)
- [DomainPasswordSpray](https://docs.wehost.co.in/cybersecurity/domainpasswordspray.md)
- [Local Administrator Password Solution (LAPS)](https://docs.wehost.co.in/cybersecurity/local-administrator-password-solution-laps.md)
- [LAPSToolkit](https://docs.wehost.co.in/cybersecurity/lapstoolkit.md)
- [LDAP Filtering Explained](https://docs.wehost.co.in/cybersecurity/ldap-filtering-explained.md)
- [Kerberoasting](https://docs.wehost.co.in/cybersecurity/kerberoasting.md)
- [Mimikatz](https://docs.wehost.co.in/cybersecurity/mimikatz.md)
- [Bypass Powershell Execution Policy](https://docs.wehost.co.in/cybersecurity/bypass-powershell-execution-policy.md)
- [Bypassing AV Signatures for PowerShell](https://docs.wehost.co.in/cybersecurity/bypassing-av-signatures-for-powershell.md)
- [Setup Static IP Linux](https://docs.wehost.co.in/cybersecurity/setup-static-ip-linux.md)
- [iptables-linux](https://docs.wehost.co.in/cybersecurity/iptables-linux.md)
- [auditd](https://docs.wehost.co.in/cybersecurity/auditd.md)
- [Setup Static IP linux](https://docs.wehost.co.in/cybersecurity/setup-static-ip-linux-1.md)
- [Install Wiregard VPN](https://docs.wehost.co.in/cybersecurity/install-wiregard-vpn.md)
- [List Dangerous PHP functions](https://docs.wehost.co.in/cybersecurity/list-dangerous-php-functions.md)
- [Falco](https://docs.wehost.co.in/cybersecurity/falco.md)
- [Blog](https://docs.wehost.co.in/blog.md)
- [The Journey of how I passed CISSP](https://docs.wehost.co.in/blog/the-journey-of-how-i-passed-cissp.md)
- [How Nmap gets what OS is running by using different probes](https://docs.wehost.co.in/blog/how-nmap-gets-what-os-is-running-by-using-different-probes.md)
- [How PsExec or similar tools operate over SMB to achieve remote command execution](https://docs.wehost.co.in/blog/how-psexec-or-similar-tools-operate-over-smb-to-achieve-remote-command-execution.md)
- [Beyond Session Hijacking: Using JavaScript Libraries for Comprehensive User Profiling Through XSS](https://docs.wehost.co.in/blog/beyond-session-hijacking-using-javascript-libraries-for-comprehensive-user-profiling-through-xss.md)
- [Why does encoded message have a = or ==](https://docs.wehost.co.in/blog/why-does-encoded-message-have-a-or.md)
- [What Does "/bin/bash -p" Do?](https://docs.wehost.co.in/blog/what-does-bin-bash-p-do.md)
- [Extract username from private SSH key](https://docs.wehost.co.in/blog/extract-username-from-private-ssh-key.md)
- [Purpose of Service Principal Names (SPN) in Active Directory](https://docs.wehost.co.in/blog/purpose-of-service-principal-names-spn-in-active-directory.md)
- [Get Passwords from Teamviewer windows (No Metasploit)](https://docs.wehost.co.in/blog/get-passwords-from-teamviewer-windows-no-metasploit.md)
- [Difference between actively logged on users, locally logged on users and remotely logged users](https://docs.wehost.co.in/blog/difference-between-actively-logged-on-users-locally-logged-on-users-and-remotely-logged-users.md)
- [Packet Flow in RouterOS](https://docs.wehost.co.in/blog/packet-flow-in-routeros.md)
- [Depixelating information in the document (finding what was not supposed to be found)](https://docs.wehost.co.in/blog/depixelating-information-in-the-document-finding-what-was-not-supposed-to-be-found.md)
- [Spotting Spoofing Securing Your Email with DMARC, DKIM, and SPF](https://docs.wehost.co.in/blog/spotting-spoofing-securing-your-email-with-dmarc-dkim-and-spf.md)
- [Stop Telling People to “Just Look at the URL”: You're Not That Special](https://docs.wehost.co.in/blog/stop-telling-people-to-just-look-at-the-url-youre-not-that-special.md)
- [NFS Isn’t Just File Sharing — It’s RPC in Disguise](https://docs.wehost.co.in/blog/nfs-isnt-just-file-sharing-its-rpc-in-disguise.md)
- [I Had Write Permissions... So Why Was Linux Saying "No"?](https://docs.wehost.co.in/blog/i-had-write-permissions...-so-why-was-linux-saying-no.md)
- [Post-Root Enlightenment: Why You Really Pwn Boxes — Thanks to IppSec](https://docs.wehost.co.in/blog/post-root-enlightenment-why-you-really-pwn-boxes-thanks-to-ippsec.md): Inspired by IppSec’s approach to always learn beyond the root flag
- [From Chaos to Compliance A Smart Audit Logging Strategy for MariaDB](https://docs.wehost.co.in/blog/from-chaos-to-compliance-a-smart-audit-logging-strategy-for-mariadb.md)
- [SELinux: A Practical Guide for Real-World Linux Security](https://docs.wehost.co.in/blog/selinux-a-practical-guide-for-real-world-linux-security.md)
- [How Certificate Transparency Logs Work](https://docs.wehost.co.in/blog/how-certificate-transparency-logs-work.md)
- [I Lost My Automation Server: A Real-World Incident Response Lesson](https://docs.wehost.co.in/blog/i-lost-my-automation-server-a-real-world-incident-response-lesson.md)
- [Why SSH Says client\_loop send disconnect Broken pipe](https://docs.wehost.co.in/blog/why-ssh-says-client_loop-send-disconnect-broken-pipe.md)
- [What Is a File Descriptor?](https://docs.wehost.co.in/blog/what-is-a-file-descriptor.md)
- [Reset Nessus Username & Password via CLI](https://docs.wehost.co.in/blog/reset-nessus-username-and-password-via-cli.md)
- [The CNAME Paradox: Why Your Root Domain Can't Be an Alias](https://docs.wehost.co.in/blog/the-cname-paradox-why-your-root-domain-cant-be-an-alias.md)
- [Your $150M Outage Started With One Wrong Assumption: Do You Even Know How to Talk During Incidents?](https://docs.wehost.co.in/blog/your-usd150m-outage-started-with-one-wrong-assumption-do-you-even-know-how-to-talk-during-incidents.md)
- [Presence-Aware Infrastructure: My Lab Knows When I'm Home (and Saves Me $$$)](https://docs.wehost.co.in/blog/presence-aware-infrastructure-my-lab-knows-when-im-home-and-saves-me-usdusdusd.md)
- [From Curiosity to Backdoor: How I Found a Stealthy Persistence Technique in EC2 Instance Connect](https://docs.wehost.co.in/blog/from-curiosity-to-backdoor-how-i-found-a-stealthy-persistence-technique-in-ec2-instance-connect.md)
- [From Shadow IT to AI-Governed Infrastructure](https://docs.wehost.co.in/blog/from-shadow-it-to-ai-governed-infrastructure.md)
- [Leveraging Multiple Tor Exit Nodes for Data Exfiltration: A Containerized Approach](https://docs.wehost.co.in/blog/leveraging-multiple-tor-exit-nodes-for-data-exfiltration-a-containerized-approach.md)
- [Adaptive Percentage-Based Search: Finding ID Ranges Without Getting Blocked](https://docs.wehost.co.in/blog/adaptive-percentage-based-search-finding-id-ranges-without-getting-blocked.md)
- [The Zombie User: AWS IAM Identity Center Session Persistence on the Management Account](https://docs.wehost.co.in/blog/the-zombie-user-aws-iam-identity-center-session-persistence-on-the-management-account.md)
- [The First Rule of Compression: Why JPEG Uses YUV Instead of RGB](https://docs.wehost.co.in/blog/the-first-rule-of-compression-why-jpeg-uses-yuv-instead-of-rgb.md)
- [Roles Are Just an Abstraction: Rethinking Authorization from First Principles](https://docs.wehost.co.in/blog/roles-are-just-an-abstraction-rethinking-authorization-from-first-principles.md)
- [Instagram](https://docs.wehost.co.in/instagram.md)
- [CTF-Walkthrough](https://docs.wehost.co.in/ctf-walkthrough.md)
- [Exploiting the HTB “Networked” Box: From Recon to Root](https://docs.wehost.co.in/ctf-walkthrough/exploiting-the-htb-networked-box-from-recon-to-root.md)
- [Exploiting Ghosts from the Past — Irked | Hack The Box](https://docs.wehost.co.in/ctf-walkthrough/exploiting-ghosts-from-the-past-irked-or-hack-the-box.md)
- [Real-World Security Lessons from HTB’s Postman: Misconfig to Root📮](https://docs.wehost.co.in/ctf-walkthrough/real-world-security-lessons-from-htbs-postman-misconfig-to-root.md)
- [HTB: OpenAdmin – RCE, Privilege Escalation, and the Art of Improvisation](https://docs.wehost.co.in/ctf-walkthrough/htb-openadmin-rce-privilege-escalation-and-the-art-of-improvisation.md)
- [HTB: Time – Deserialization, Java Shenanigans & Root in Style](https://docs.wehost.co.in/ctf-walkthrough/htb-time-deserialization-java-shenanigans-and-root-in-style.md)
- [HTB-Forge: Double SSRF to Root Breaking Forge from the Inside Out 🧨](https://docs.wehost.co.in/ctf-walkthrough/htb-forge-double-ssrf-to-root-breaking-forge-from-the-inside-out.md)
- [HTB: Traverxec – From RCE to Root with a Nostalgic Bang](https://docs.wehost.co.in/ctf-walkthrough/htb-traverxec-from-rce-to-root-with-a-nostalgic-bang.md)
- [HTB Walkthrough – making a magical walkthrough with Magic](https://docs.wehost.co.in/ctf-walkthrough/htb-walkthrough-making-a-magical-walkthrough-with-magic.md)
- [HTB Writeup: Passage – From News to Root](https://docs.wehost.co.in/ctf-walkthrough/htb-writeup-passage-from-news-to-root.md)
- [HTB - Shibboleth Walkthrough 🥷](https://docs.wehost.co.in/ctf-walkthrough/htb-shibboleth-walkthrough.md)
- [TartarSauce – HTB Walkthrough](https://docs.wehost.co.in/ctf-walkthrough/tartarsauce-htb-walkthrough.md)
- [Grup Labs](https://docs.wehost.co.in/grup-labs.md)
- [Amazon Macie Lab: Spotting Sensitive Data Like a Boss](https://docs.wehost.co.in/grup-labs/amazon-macie-lab-spotting-sensitive-data-like-a-boss.md)
- [Building a Comprehensive AWS Config Lab: Tracking IAM Configuration Changes with SNS and S3](https://docs.wehost.co.in/grup-labs/building-a-comprehensive-aws-config-lab-tracking-iam-configuration-changes-with-sns-and-s3.md)
- [AWS NACL vs Security Group: The Practical Guide (With Console Walkthroughs)](https://docs.wehost.co.in/grup-labs/aws-nacl-vs-security-group-the-practical-guide-with-console-walkthroughs.md)
- [Nathaniel Profile](https://docs.wehost.co.in/profile.md)
- [Connect With Me](https://docs.wehost.co.in/connect-with-me.md)
- [CISSP-Playbook](https://docs.wehost.co.in/cissp-playbook.md)