HACKING LABO

CYBER · SECURITY · LAB

New here? Start with the basics Browse learning paths

Explanation

What Is a VLAN? — Splitting One Switch Logically at Layer 2

A VLAN (Virtual LAN) logically divides one physical switch / one physical network into several indep...

2026-06-10 views 211 likes 0
Explanation

What Is NAT? — Translating Private IPs to a Public IP, and Port Forwarding

NAT (Network Address Translation) rewrites IP addresses as packets cross a border router. The reason...

2026-06-10 views 247 likes 0
Explanation

SPF Explained — Stopping Email Spoofing by Sender IP

SPF (Sender Policy Framework) lets a domain owner declare, in a DNS TXT record, which server IPs are...

2026-06-10 views 210 likes 0
Explanation

What Is DHCP? — The DORA Flow That Hands Out IP Addresses Automatically

DHCP (Dynamic Host Configuration Protocol) automatically assigns an IP address, subnet mask, default...

2026-06-10 views 364 likes 0
Explanation

What Is ARP? — Resolving a MAC Address from an IP Address

ARP (Address Resolution Protocol) is the foundational IPv4 protocol that asks, on a local network, '...

2026-06-10 views 371 likes 0
Explanation

WiFiPumpkin3 Explained — A Rogue AP (Evil Twin) Attack Framework

WiFiPumpkin3 is a Python 3 rogue access point / Wi-Fi MITM framework developed by the P0cL4bs team (...

2026-06-08 views 322 likes 0
Explanation

RustScan Explained — A Blazing-Fast Port Scanner in Rust with nmap Hand-off

RustScan is a blazing-fast port scanner written in Rust by Autumn "bee-san" Skerritt and the RustSca...

2026-06-08 views 471 likes 0
Explanation

The Michael Shutdown Attack — A Wi-Fi DoS That Weaponizes TKIP's Own Defense

The Michael shutdown attack (the TKIP MIC countermeasure attack) is a DoS that weaponizes the very d...

2026-06-08 views 299 likes 0
Explanation

LinPEAS Explained — A Script That Auto-Enumerates Linux Privilege-Escalation Vectors

LinPEAS (Linux Privilege Escalation Awesome Script) is a shell script from Carlos Polop's PEASS-ng p...

2026-06-08 views 253 likes 0
Explanation

EyeWitness Explained — Automating Mass Web-Host Screenshots for Recon Triage

EyeWitness is a recon / triage tool by Christopher Truncer (FortyNorth Security). When nmap or rusts...

2026-06-08 views 254 likes 0
Explanation 🔥 Popular

Evil Twin Attack Explained — How a Rogue AP Impersonates a Network with the Same SSID, and How to Defend

An Evil Twin attack stands up a rogue access point that impersonates a legitimate AP by broadcasting...

2026-06-08 views 1048 likes 0
Explanation 🔥 Popular

aireplay-ng Explained — The Packet-Injection Tool of the aircrack-ng Suite

aireplay-ng is the packet-injection tool at the core of the aircrack-ng suite. It has two jobs: gene...

2026-06-08 views 1316 likes 0
Explanation

wfuzz Explained — A Flexible Web Fuzzer Written in Python

wfuzz is a Python-based web fuzzer developed primarily by Xavier Mendez (@xmendez) — the ancestor of...

2026-06-08 views 273 likes 0
Explanation

SQLMap Explained — The Go-To Tool for Automating SQL Injection Detection and Exploitation

SQLMap is an open-source Python tool by Bernardo Damele A.G. and Miroslav Stampar that automates det...

2026-06-08 views 367 likes 0
Explanation

wifite Explained — Automating Wireless Attacks End to End

wifite (wifite2) is a Python-based Wi-Fi auditing tool that orchestrates the aircrack-ng suite, reav...

2026-06-02 views 784 likes 0
Explanation

ffuf Explained — A Fast Web Fuzzer Written in Go

ffuf (Fuzz Faster U Fool) is a fast Go-based web fuzzer released by Joona Hoikkala in 2018. It subst...

2026-06-01 views 232 likes 0
Explanation

SQL Injection Explained — How It Works, Common Attack Techniques, and Defenses

SQL injection (SQLi) is a long-standing vulnerability where user input is concatenated directly into...

2026-05-29 views 231 likes 0
Explanation

CSRF Explained — How Cross-Site Request Forgery Works and How to Defend Against It

CSRF (Cross-Site Request Forgery) is a vulnerability where the victim, while logged in to a target s...

2026-05-29 views 359 likes 0
Explanation

Wireshark Explained — The Standard Tool for Packet Capture and Analysis

Wireshark is the world's most widely used network analyzer — it captures packets straight off the wi...

2026-05-29 views 347 likes 0
Explanation

LFI/RFI Explained — How Local/Remote File Inclusion Works, Attack Techniques, and Defenses

LFI (Local File Inclusion) and RFI (Remote File Inclusion) occur when a web application takes a file...

2026-05-22 views 378 likes 0
Explanation

HTTP Security Headers — A Second Line of Defense That Tells the Browser How to Defend Itself

HTTP security headers are response headers the server uses to control browser behavior, blocking bro...

2026-05-22 views 275 likes 0
Explanation

SSRF Explained — How Server-Side Request Forgery Works, Attack Techniques, and Defenses

SSRF (Server-Side Request Forgery) is a vulnerability where the web application's server fetches an...

2026-05-22 views 373 likes 0
Explanation ▶_ Exercise

Nmap Explained — Port Scanning, Service Detection, and OS Fingerprinting

Nmap (Network Mapper) is an open-source scanner for discovering hosts and services on a network. Rel...

2026-05-17 views 643 likes 0
Explanation ✎ Quiz

XSS Explained — How Cross-Site Scripting Works and How to Defend Against It

Cross-site scripting (XSS) injects malicious script into a web application so that it runs inside an...

2026-05-17 views 683 likes 0
Explanation

Deauthentication Attack — How Wi-Fi Disconnect Attacks Work and How PMF Stops Them

A Deauthentication Attack spoofs the IEEE 802.11 Deauthentication management frame (Subtype 0x0C) to...

2026-05-11 views 385 likes 0
Explanation 🔥 Popular

Ghidra — How NSA's Open-Source Reverse Engineering Suite Works

Ghidra is the reverse-engineering suite the NSA used internally and then released as OSS under Apach...

2026-05-11 views 2529 likes 0
Explanation

Firewalls Explained — Five Generations, Stateful, NGFW / WAF / Cloud SGs

A firewall is an access-control device that drops any traffic that doesn't match a defined rule. Sta...

2026-05-11 views 308 likes 0
Explanation

ASM Explained — Attack Surface Management / EASM, CAASM, DRPS

ASM (Attack Surface Management) is the security discipline of discovering every entry point an attac...

2026-05-11 views 302 likes 0
Explanation

Ransomware — How It Works, Notable Incidents, and How to Defend

Ransomware is malware that 'encrypts files and demands a ransom for the decryption key'. Its ancesto...

2026-05-10 views 310 likes 0
Explanation

Trojan Horse Explained — Types, Delivery Vectors, and Defenses

A Trojan horse is malware that disguises itself as legitimate software so the user installs it thems...

2026-05-10 views 419 likes 0
Explanation

DDoS Explained — Mechanics, Categories, and Defenses

DDoS (Distributed Denial of Service) is the attack of burying a target under legitimate-looking requ...

2026-05-10 views 276 likes 0
Explanation

Buffer Overflow Explained — Stack Mechanics, Exploits, and Mitigations

Buffer overflow — writing past the end of an allocated buffer and corrupting adjacent memory — is th...

2026-05-10 views 337 likes 0
Explanation

Kali Linux — The Pentest Distribution: Its Tools and How to Use Them

Kali Linux is the Debian-based 'attacker-optimised' Linux distribution maintained by Offensive Secur...

2026-05-10 views 475 likes 0
Explanation

Linux Explained — Architecture, Commands, and Major Distributions

Strictly speaking, 'Linux' refers only to the kernel; what we use day-to-day is a stack of Linus's k...

2026-05-10 views 321 likes 0
Explanation

Wi-Fi (IEEE 802.11) Explained — Standards, Bands, and WPA

Wi-Fi shares Ethernet's frame format but rides on radio waves — a shared medium, half-duplex, collis...

2026-05-10 views 526 likes 0
Explanation

Ethernet Explained — Frame Format, MAC Addresses, and Switching

Ethernet is the L2 protocol that has survived nearly 50 years as the only practical choice for wired...

2026-05-10 views 334 likes 0
Explanation

IPsec Explained — Tunnel/Transport Modes and the IKE Key Exchange

IPsec is a family of protocols that encrypts and authenticates IP packets themselves at L3 — rather...

2026-05-10 views 335 likes 0
Explanation

TCP/IP Explained — The 4-Layer Model and TCP vs UDP

TCP/IP names both 'the protocol suite that runs the Internet' and 'the four-layer reference model th...

2026-05-09 views 330 likes 0
Explanation

VPN Explained — IPsec, OpenVPN, and WireGuard Compared

A VPN (Virtual Private Network) is the umbrella term for virtually stretching an 'encrypted private...

2026-05-09 views 328 likes 0
Explanation

The OSI Reference Model — Seven Layers and How They Map to TCP/IP

The ISO Basic Reference Model (Open Systems Interconnection Reference Model) is the 1984 internation...

2026-05-09 views 350 likes 0
Explanation

OSINT — Methods, Tools, and Real-World Examples of Open-Source Investigation

OSINT (Open Source Intelligence) is the umbrella term for the techniques and culture of investigatin...

2026-05-09 views 813 likes 0
Explanation

SSL/TLS Explained — How HTTPS Encrypts the Web and How Certificates Work

SSL/TLS is the protocol that gives Internet traffic confidentiality, authentication, and tamper-dete...

2026-05-09 views 337 likes 0
Explanation

IP Addresses Explained — IPv4 / IPv6 / Subnets / Routing

IP (Internet Protocol) handles addressing and packet forwarding at the heart of the TCP/IP stack. Th...

2026-05-09 views 306 likes 0
Explanation

DNS Explained — How Name Resolution Works and the Record Types

DNS is the distributed database that converts memorable domain names into the IP addresses computers...

2026-05-09 views 583 likes 0
Explanation

Metasploit Framework — How to Use It for Penetration Testing

Metasploit Framework is the open-source offensive-testing framework launched by HD Moore in 2003 and...

2026-05-09 views 492 likes 0
Explanation

ICMP Explained — How ping and traceroute Work and What the Message Types Mean

ICMP is the control protocol that signals errors and path conditions on IP networks. This article co...

2026-05-09 views 334 likes 0
Explanation

SSH — How It Works, Public-Key Authentication, and Essential Commands

SSH is the protocol for operating another computer safely over the network. It replaced cleartext pr...

2026-05-09 views 294 likes 0
Explanation

HTTP/HTTPS

HTTP/HTTPS is the protocol the World Wide Web uses to move content. This article covers the request/...

2025-10-14 views 593 likes 0

machine

Levi

Linux Easy

Easy Linux box. UDP scan reveals SNMP, snmpwalk leaks the running PostgreSQL service, COPY FROM PROG...

2026-05-02 views 313 likes 0