The current direction for Helm & Salvo puts ship handling and gunnery first, with escorts and expedition choices built around the same flagship.

Unsorted command notes for Vim, IFS, interactive shells, and command execution. The IFS section is still unfinished.

MSFVenom commands for binary and web payloads, scripting payloads, shellcode, and the handlers used with them.

An unfinished historical note on Windows privilege escalation. The original body contains only a TODO.

An unfinished historical note on Swagshop. It records the initial scan and service versions; enumeration, foothold, privilege escalation, and lessons were left blank.

A FriendZone walkthrough using DNS zone transfers, an anonymous writable SMB share, local file inclusion, and a writable os.py imported by a root cron job. A PHP filter question remains unresolved.

Notes on site updates, changes to the writeup format, and the return to writing in December 2021 after a year away.

An Irked walkthrough using the UnrealIRCd backdoor, an image containing a password, and viewuser for privilege escalation. The original notes retain open questions about enumeration and login requirements.

An unfinished historical note on Valentine, covering SFTP and Heartbleed enumeration, an encrypted SSH key, and unsuccessful decryption or login attempts. The foothold and privilege escalation sections are blank.

My OSCP study plan, covering Linux, Python, MSF, Windows, and buffer overflows, with links saved for later.

Resources I found while preparing for OSCP, covering enumeration, shells, privilege escalation, and preparation guides.

A command cheat sheet for transferring files with Netcat, Wget, Curl, and PowerShell on Linux and Windows.

An unfinished historical note on Sense, consisting mainly of reconnaissance and exploitation screenshots, with a reminder to include more file extensions in directory scans.

Reverse shell commands for Bash, Netcat, Python, Perl, PHP, Ruby, Java, and Xterm, with the original testing notes.

Notes on curl certificate and protocol errors, plus a Kali VMware networking problem where the device appeared as unmanaged.

Screenshot-led Nibbles notes on finding the application version, using a weak password and file upload to get a shell, and gaining root through a sudo misconfiguration.

Historical Beep notes on several attempted routes, including local file inclusion, an upload exploit, remote code injection, and Shellshock. Some attempts failed and several sections remain unfinished.

A practice plan using OSCP-like Hack The Box and VulnHub machines, followed by the PWK course, OSCP labs, and reports.

Linux privilege escalation notes on enumeration, scripts, misconfigured permissions, scheduled tasks, SUID, and exposed credentials, with unfinished sections left in place.

Notes on finding software release dates and a version-comparison technique I still need to understand better.

A Bashed walkthrough covering port scanning, the phpbash web shell, switching to scriptmanager through sudo, and a Python script run by a root cron job.

A Shocker walkthrough from port and directory scanning to Shellshock, debugging the nmap payload, and gaining root through passwordless sudo access to Perl.

Notes from a few Nmap experiments, comparing scan options and timing, adjusting retries, and using a report stylesheet.

OSCP preparation notes on setting up my pentesting system, writing lab walkthroughs, and recording what I learn along the way.

A detailed Lame walkthrough comparing several exploit routes, including Samba usermap_script, a shared-filesystem approach, distcc, and local privilege escalation. Failed attempts and unfinished investigations are retained.

Historical notes on connecting to the Hack The Box VPN, checking the tun0 address, and removing a stale interface. The OpenVPN installation section is unfinished.

My Kali setup notes, covering networking, package sources, tools, and terminal settings, followed by an attempt at a one-click initialization script.