Nmap Hidden Gem: ssl-cert
Most people use Nmap to find open ports and stop there, but some of the NSE scripts are worth digging into. One of my favorites is: ```bash nmap --script ssl-cert -p443 ``` Instead of just confirm...
Hashtag
#infosec
Hashtags are a secondary discovery layer across RootBadger. Groups still provide the main hierarchy.
Mastering Nmap: One Scan to Learn Almost Everything
One of my favorite all-around Nmap commands is: ```bash sudo nmap -Pn -sS -sV -O -A --script=vuln --reason --traceroute -p- -T4 192.168.1.10 ``` It skips host discovery (`-Pn`), performs a SYN scan...
old routers and boring clues
spent a few minutes poking at an old router shell and remembered how much of hacking is just reading boring output until one line looks wrong. no movie music. no green rain. just logs, weird defaults...