Ethical Hacking.
What single requirement most separates ethical hacking from criminal hacking?
In the United States, which federal law most directly criminalizes unauthorized access to computer systems?
In a common penetration-testing methodology, which phase comes immediately AFTER reconnaissance?
Which of the following is an example of PASSIVE reconnaissance?
In a "black box" assessment, what does the tester typically start with?
What best describes the "post-exploitation" phase?
Why is the reporting phase considered one of the most important parts of an engagement?
A resource like GTFOBins catalogs how common Unix binaries can be abused to escalate privileges or break out of restricted shells. These "living off the land" techniques rely on what?
In December 2021, a critical remote code execution vulnerability in Apache Log4j (nicknamed "Log4Shell") affected millions of systems. Look it up and submit its CVE identifier (format: CVE-YYYY-NNNNN).
The 2014 OpenSSL vulnerability nicknamed "Heartbleed" let attackers read chunks of a server’s memory, potentially leaking private keys. Submit its CVE identifier.
Vulnerabilities are also classified by weakness type using CWE identifiers. Look up the CWE ID for "Improper Neutralization of Special Elements used in an SQL Command" — better known as SQL Injection.
For More Information
Hack The Box (HTB)
Hands-on penetration-testing labs and vulnerable machines. The free "Starting Point" track and HTB Academy offer guided, beginner-friendly paths into offensive security.
Visit →OffSec
The creators of Kali Linux and the OSCP certification. They maintain Proving Grounds practice labs and publish free learning materials and the Kali distribution.
Visit →pwn.college
A free, university-grade cybersecurity education project (from Arizona State University) covering binary exploitation, reverse engineering, web security, and more.
Visit →TryHackMe
Beginner-friendly, guided "rooms" and structured learning paths — many of them free. A gentle on-ramp to hands-on hacking before harder platforms.
Visit →GTFOBins
A curated list of Unix binaries that can be abused to bypass local security restrictions — invaluable for understanding privilege escalation and shell breakouts.
Visit →Exploit-DB
An archive of public exploits and proof-of-concept code (maintained by OffSec). A great place to research how known vulnerabilities are actually exploited.
Visit →CVE / National Vulnerability Database (NVD)
The U.S. National Vulnerability Database. Search CVEs, read vulnerability details, and check CVSS severity scores — exactly the kind of lookup the challenges above require.
Visit →OverTheWire
Free "wargames" that teach security concepts through progressively harder challenges, starting with the classic Bandit Linux/SSH wargame.
Visit →