https://nr-11.github.io/Penetration Tester & BugHunter & Ctf Player 2026-10-09T17:00:01+03:00 Nour Ebrahim https://nr-11.github.io/ Jekyll © 2026 Nour Ebrahim /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-10-09T12:00:00+03:00 2026-10-09T12:00:00+03:00 https://nr-11.github.io/posts/Connected/ Nour Ebrahim

Hello World Today, we will solve one of the HackTheBox machines called “Connected”. It is an easy Linux machine. HTB: Connected Reconnaissance First, I started with a quick Nmap scan to see which ports were open and which services were running. nmap -A 10.129.245.100 Nmap scan report for connected.htb (10.129.245.100) Host is up (0.23s latency). Not shown: 997 filtered tcp ports (no-res...

2026-10-02T12:00:00+03:00 2026-10-09T16:59:36+03:00 https://nr-11.github.io/posts/Reactor/ Nour Ebrahim

Hello World Today, we will solve one of the HackTheBox machines called “Reactor”. It is an easy Linux machine. HTB: Reactor Reconnaissance I started with a quick Nmap scan to see which ports were open and which services were running. nmap -A 10.129.108.152 Nmap scan report for 10.129.108.152 Host is up (0.14s latency). Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE VERSI...

2026-06-14T12:00:00+03:00 2026-07-18T19:07:49+03:00 https://nr-11.github.io/posts/Api_Attacks/ Nour Ebrahim

Hello World Today, I will solve the API Attacks Skills Assessment in the HackTheBox Web Penetration Tester Path. Reconnaissance First, I used the IP address provided to access the web application through the browser. Then I went to /api/v2/authentication/customers/sign-in and entered my credentials in the Authentication section to obtain a JWT token. Now I will take this JWT and author...

2026-06-03T12:00:00+03:00 2026-07-18T16:51:59+03:00 https://nr-11.github.io/posts/File_inclusion/ Nour Ebrahim

Hello World Today, I will solve the File Inclusion Skills Assessment in the HackTheBox Web Penetration Tester Path. Reconnaissance First, I used the IP address provided to access the web application through the browser. There is a site that provides World Wide Freight services. Then I started browsing the site and found a parameter called “page”. So I went to Burp, took this request...

2026-05-26T12:00:00+03:00 2026-07-18T16:51:59+03:00 https://nr-11.github.io/posts/26-Web_Attacks/ Nour Ebrahim

Hello World Today, I will solve the Web Attacks Skills Assessment in the HackTheBox Web Penetration Tester Path . Reconnaissance First, let’s use the IP address provided to access the web application through the browser and find the login page. Let’s run Burp to capture requests in the HTTP history. We can use the credentials provided to log in: ‘htb-student: Academy_student!’ When w...