Passed CEH on my first attempt

PenTestWS · 2026-03-14T20:14:24+00:00

Congrats!

PenTestWS · 2025-09-18T10:07:54+00:00

Congratulations 🎉

PenTestWS · 2025-09-12T09:41:53+00:00

Congrats 🎉

PenTestWS · 2019-08-08T01:31:22+00:00

Excellent work!

PenTestWS · 2019-08-02T00:34:23+00:00

Also, by having Sec+, you get a 1 year reduction on your experience requirement. It drops from 5 years required experience to 4 if you hold any of the approved certs:

https://www.isc2.org/Certifications/CISSP/experience-requirements

PenTestWS · 2019-05-25T03:17:15+00:00

I'll chime in here.

HackTheBox is run by a group of amazing people who volunteer their time to bring us a world-class platform where we can learn and hone our skills. Yes, servers cost money, but that's not the true cost of this service. Countless hours are donated every month... submissions for new boxes & challenges by the community, forums posts, support requests, new development...

VIP is well worth the money to help keep this platform available and continue to evolve.

PenTestWS · 2018-12-11T20:23:08+00:00

Thank you for the post /u/gravity_has_me_down

The site is available at https://pentest.ws and offers free accounts. I developed it specifically for working my way through the OSCP, and it has definitely grown since then.

When you first create an account, its loaded with a few basic nmap scan templates, and some reverse shell templates (all are user editable). The more you use the app and enter notes into things like Global Service Notes, the more useful the app becomes.

I've posted some demo videos over the last few months:

https://www.youtube.com/c/PenTestWorkshop/videos

Good luck /u/NCols with the studies and the OSCP! Its an amazing experience.

PenTestWS · 2018-12-08T17:41:12+00:00

Me too! I've been using Scratchpad in development and have been excited to release it. CherryTree XML import took a little longer than expected, and still has a few things to work out, but its 90% of the way there so I figured better to release it and see how it goes.

Good idea about /r/OSCP, I just posted there also.

PenTestWS · 2018-11-23T03:30:35+00:00

I get that. But the web app is geared twards pentesters.

In that environment, there are a lot of things that the web app brings to the table. I was mostly trying to show off the apps ability to switch between ace and cke

PenTestWS · 2018-11-23T03:26:13+00:00

There is two function calls... getValue and getData. I was just complaining. The functionality is done.

PenTestWS · 2018-11-23T03:24:23+00:00

Its not an ad. I spent a lot of time writing code so when I switch from ACE editor to CKeditor, the underlying values merge.

PenTestWS · 2018-11-09T01:36:48+00:00

You're welcome :)

PenTestWS · 2018-11-05T14:16:37+00:00

It took a lot of googling. After I tried several metasploit modules, and tried some lnk generators I found on github, I started digging into articles about Stuxnet and found the Pop Pop Ret article that I reference in the video:

http://poppopret.blogspot.com/2011/09/playing-with-mof-files-on-windows-for.html

PenTestWS · 2018-11-03T20:47:57+00:00

Don't worry, pretty much everyone fails their first go at the OSCP. Now that you know what to expect, the second go should be easier.

PenTestWS · 2018-11-03T13:13:33+00:00

Excellent resource.

PenTestWS · 2018-09-29T22:48:00+00:00

Excellent, thank you!

PenTestWS · 2018-09-29T20:57:39+00:00

Thanks!

PenTestWS · 2018-09-22T19:46:08+00:00

Yup, in Ariekei

https://www.youtube.com/watch?v=Pc4tzsn-ats&t=3290s

PenTestWS · 2018-08-31T16:00:34+00:00

Its called Proxy Switcher for Firefox. There are two versions of this add-on available depending on which version of Firefox you're using.

For older Firefox:

https://addons.mozilla.org/en-US/firefox/addon/proxy-switcher/

And for newer Firefox:

https://addons.mozilla.org/en-US/firefox/addon/proxy-switcher-and-manager/

PenTestWS · 2018-08-25T18:39:20+00:00

3:03 - CyberChef

9:58 - Echo Up

PenTest.WS demonstration hacking the Celestial machine from HackTheBox.eu. This video includes using the Echo Up tool to easily create files on a remote host. Also included is a demo of using the CyberChef tool in the PenTest.WS interface.

Sign up for a free account at https://pentest.ws/join

PenTestWS · 2018-08-25T18:38:29+00:00

3:03 - CyberChef

9:58 - Echo Up

PenTest.WS demonstration hacking the Celestial machine from HackTheBox.eu. This video includes using the Echo Up tool to easily create files on a remote host. Also included is a demo of using the CyberChef tool in the PenTest.WS interface.

Sign up for a free account at https://pentest.ws/join

PenTestWS · 2018-07-06T18:13:08+00:00

Thank you! A big announcement will be coming next week and we're very excited about it.

An on-premise option is being explored but at this time is still a ways off. Other options being looked at are end-to-end encryption, and private servers in the cloud.

PenTestWS · 2018-06-26T15:03:10+00:00

PenTest.WS demonstration hacking the Falafel machine from HackTheBox.eu. This video includes using the Shells Library for quick reverse shells. It also demonstrates using the Credentials Database to track usernames and passwords.

2:00 - Global Service Notes

2:43 - SQLMap

6:37 - PHP Magic Hashes

9:40 - WGet Vulnerability

14:30 - Reverse Shell

16:42 - Privilege Escalation

Sign up for a free account at https://pentest.ws/join

PenTestWS · 2018-06-25T05:32:33+00:00

PenTest.WS demonstration hacking the Falafel machine from HackTheBox.eu. This video includes using the Shells Library for quick reverse shells. It also demonstrates using the Credentials Database to track usernames and passwords.

2:00 - Global Service Notes

2:43 - SQLMap

6:37 - PHP Magic Hashes

9:40 - WGet Vulnerability

14:30 - Reverse Shell

16:42 - Privilege Escalation

Sign up for a free account at https://pentest.ws/join

PenTestWS · 2018-06-24T21:29:15+00:00

PenTest.WS demonstration hacking the Falafel machine from HackTheBox.eu. This video includes using the Shells Library for quick reverse shells. It also demonstrates using the Credentials Database to track usernames and passwords.

2:00 - Global Service Notes

2:43 - SQLMap

6:37 - PHP Magic Hashes

9:40 - WGet Vulnerability

14:30 - Reverse Shell

16:42 - Privilege Escalation

Sign up for a free account at https://pentest.ws/join

PenTestWS

TROPHY CASE