/01
Port 80 is open. Now what?
A practical route through headers, technologies, hidden paths, virtual hosts, and the assumptions worth checking first.
ARCHIVE ONLINE
WRITEUPS / LAB NOTES / FAILURES
Field notes from
the attack path.
No perfect hindsight. These notes keep the failed commands, wrong assumptions, and useful corrections.
- RECORDS
- 06
- PUBLISHED
- 01
- SCOPE
- AUTHORIZED ONLY
ARCHIVE STATUS
The featured field note is live. The remaining cards are sample drafts and will be replaced by real, sanitized writeups one by one.
01 // FEATURED WRITEUP
Fresh from the desk.
READ NOW→OPEN FIELD NOTE
/02DRAFT
ZPX-RECON-002 07 MIN
Nmap gave me a service. I still need context.
Why a version string is the beginning of investigation—not permission to fire every exploit you can find.
/03DRAFT
ZPX-CLI-003 05 MIN
grep for people who live in terminals
The flags and small patterns I reach for while filtering URLs, command output, logs, and evidence.
/04DRAFT
ZPX-WEB-004 09 MIN
Burp Repeater: slow down and prove it.
A manual-testing mindset for changing one thing at a time and keeping evidence that actually explains the result.
/05DRAFT
ZPX-AD-005 12 MIN
What Active Directory enumeration actually means.
A lab-first map of users, groups, hosts, relationships, and why random commands do not become methodology.
/06DRAFT
ZPX-OPS-006 04 MIN
Scope before scanning.
The short checklist that keeps practice legal, controlled, and useful before the first packet leaves your machine.
02 // PUBLISHING RULE
No filler to make the archive look busy.
The first real entry goes live when the testing, evidence, and explanation are strong enough to help someone.
RETURN HOME →