https://www.amm907.com/en/Technical notes and development journals from AMM Laben https://www.amm907.com/en/articles/iron-tide-devlog-direction/https://www.amm907.com/en/articles/iron-tide-devlog-direction/The current direction for Helm & Salvo puts ship handling and gunnery first, with escorts and expedition choices built around the same flagship.Tue, 22 Sep 2026 00:00:00 GMT https://www.amm907.com/en/articles/weaponry-cheat-sheet-unname/https://www.amm907.com/en/articles/weaponry-cheat-sheet-unname/Unsorted command notes for Vim, IFS, interactive shells, and command execution. The IFS section is still unfinished.Thu, 02 Dec 2021 00:00:00 GMT https://www.amm907.com/en/articles/weaponry-cheat-sheet-msfvenom/https://www.amm907.com/en/articles/weaponry-cheat-sheet-msfvenom/MSFVenom commands for binary and web payloads, scripting payloads, shellcode, and the handlers used with them.Wed, 16 Dec 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-swagshop-writeup/https://www.amm907.com/en/articles/htb-htb-linux-swagshop-writeup/An unfinished historical note on Swagshop. It records the initial scan and service versions; enumeration, foothold, privilege escalation, and lessons were left blank.Mon, 07 Dec 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-friendzone-writeup/https://www.amm907.com/en/articles/htb-htb-linux-friendzone-writeup/A FriendZone walkthrough using DNS zone transfers, an anonymous writable SMB share, local file inclusion, and a writable os.py imported by a root cron job. A PHP filter question remains unresolved.Wed, 02 Dec 2020 00:00:00 GMT https://www.amm907.com/en/articles/changelog/https://www.amm907.com/en/articles/changelog/Notes on site updates, changes to the writeup format, and the return to writing in December 2021 after a year away.Mon, 30 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-irked-writeup/https://www.amm907.com/en/articles/htb-htb-linux-irked-writeup/An Irked walkthrough using the UnrealIRCd backdoor, an image containing a password, and viewuser for privilege escalation. The original notes retain open questions about enumeration and login requirements.Mon, 30 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-valentine-writeup/https://www.amm907.com/en/articles/htb-htb-linux-valentine-writeup/An unfinished historical note on Valentine, covering SFTP and Heartbleed enumeration, an encrypted SSH key, and unsuccessful decryption or login attempts. The foothold and privilege escalation sections are blank.Sun, 29 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/oscp-prepration-learning-plan/https://www.amm907.com/en/articles/oscp-prepration-learning-plan/My OSCP study plan, covering Linux, Python, MSF, Windows, and buffer overflows, with links saved for later.Fri, 27 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/oscp-prepration-resources/https://www.amm907.com/en/articles/oscp-prepration-resources/Resources I found while preparing for OSCP, covering enumeration, shells, privilege escalation, and preparation guides.Fri, 27 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/weaponry-cheat-sheet-file-transfer/https://www.amm907.com/en/articles/weaponry-cheat-sheet-file-transfer/A command cheat sheet for transferring files with Netcat, Wget, Curl, and PowerShell on Linux and Windows.Thu, 26 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-sense-writeup/https://www.amm907.com/en/articles/htb-htb-linux-sense-writeup/An unfinished historical note on Sense, consisting mainly of reconnaissance and exploitation screenshots, with a reminder to include more file extensions in directory scans.Tue, 24 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/weaponry-cheat-sheet-reverse-shell/https://www.amm907.com/en/articles/weaponry-cheat-sheet-reverse-shell/Reverse shell commands for Bash, Netcat, Python, Perl, PHP, Ruby, Java, and Xterm, with the original testing notes.Mon, 23 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-nibbles-writeup/https://www.amm907.com/en/articles/htb-htb-linux-nibbles-writeup/Screenshot-led Nibbles notes on finding the application version, using a weak password and file upload to get a shell, and gaining root through a sudo misconfiguration.Sun, 22 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/weaponry-kali-common-problems/https://www.amm907.com/en/articles/weaponry-kali-common-problems/Notes on curl certificate and protocol errors, plus a Kali VMware networking problem where the device appeared as unmanaged.Sun, 22 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-beep-writeup/https://www.amm907.com/en/articles/htb-htb-linux-beep-writeup/Historical Beep notes on several attempted routes, including local file inclusion, an upload exploit, remote code injection, and Shellshock. Some attempts failed and several sections remain unfinished.Mon, 16 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/oscp-prepration-training-plan/https://www.amm907.com/en/articles/oscp-prepration-training-plan/A practice plan using OSCP-like Hack The Box and VulnHub machines, followed by the PWK course, OSCP labs, and reports.Sun, 15 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/oscp-note-version-compare/https://www.amm907.com/en/articles/oscp-note-version-compare/Notes on finding software release dates and a version-comparison technique I still need to understand better.Sat, 14 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/weaponry-priv-esc-linux-priv-esc/https://www.amm907.com/en/articles/weaponry-priv-esc-linux-priv-esc/Linux privilege escalation notes on enumeration, scripts, misconfigured permissions, scheduled tasks, SUID, and exposed credentials, with unfinished sections left in place.Sat, 14 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-bashed-writeup/https://www.amm907.com/en/articles/htb-htb-linux-bashed-writeup/A Bashed walkthrough covering port scanning, the phpbash web shell, switching to scriptmanager through sudo, and a Python script run by a root cron job.Fri, 13 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-shocker-writeup/https://www.amm907.com/en/articles/htb-htb-linux-shocker-writeup/A Shocker walkthrough from port and directory scanning to Shellshock, debugging the nmap payload, and gaining root through passwordless sudo access to Perl.Tue, 10 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/oscp-note-nmap-tips/https://www.amm907.com/en/articles/oscp-note-nmap-tips/Notes from a few Nmap experiments, comparing scan options and timing, adjusting retries, and using a report stylesheet.Sat, 07 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-linux-lame-writeup/https://www.amm907.com/en/articles/htb-htb-linux-lame-writeup/A detailed Lame walkthrough comparing several exploit routes, including Samba usermap_script, a shared-filesystem approach, distcc, and local privilege escalation. Failed attempts and unfinished investigations are retained.Fri, 06 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/oscp-in-the-beginning/https://www.amm907.com/en/articles/oscp-in-the-beginning/OSCP preparation notes on setting up my pentesting system, writing lab walkthroughs, and recording what I learn along the way.Fri, 06 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/htb-htb-environment/https://www.amm907.com/en/articles/htb-htb-environment/Historical notes on connecting to the Hack The Box VPN, checking the tun0 address, and removing a stale interface. The OpenVPN installation section is unfinished.Thu, 05 Nov 2020 00:00:00 GMT https://www.amm907.com/en/articles/weaponry-kali-kali-deploy/https://www.amm907.com/en/articles/weaponry-kali-kali-deploy/My Kali setup notes, covering networking, package sources, tools, and terminal settings, followed by an attempt at a one-click initialization script.Thu, 05 Nov 2020 00:00:00 GMT