CTF Training

CPENT Obsidian Notes & Tools Vault By ZishanHack The notes I used during my CPENT preparation are now available to help other penetration testers. 📚 What's included? • 130+ Markdown notes • 40+ tool cheat sheets • 18 organized sections • Lifetime updates Covers Active Directory, Web/API security, pivoting, binary exploitation, IoT, and more. 🔗 Get your copy: https://zishanhack.com/products/cpent Independent resource. Not official EC-Council material. #CPENT #PenetrationTesting #CyberSecurity

📌 Official Announcement from ZishanHack If you're preparing for OSCP / OSCP+, this is important. After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on: 👉 https://zishanhack.com It is a professional, exam-focused Obsidian vault built to give learners: - A clean command-first structure - Fast workflow navigation - Practical enumeration to exploitation flow - Realistic privilege escalation patterns - Pivoting & tunneling references - Zero clutter - Pure exam-ready efficiency - Many OSCP learners waste months building their notes from scratch. This vault removes that burden entirely. I created it because the OSCP journey becomes significantly easier when your notes are: - Organized - Searchable - Linked - Structured - Built for high-speed execution - Designed for exam pressure If you want a cleaner, faster, more reliable OSCP workflow, the download is available here: 👉 https://zishanhack.com This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder. Feel free to share this with anyone preparing for OSCP. - Zishan Ahamed Thandar

🚨 New Bug Bounty Breakdown is Live! 🚨 I just opened the vault on a 2019 SQL Injection (SQLi) I found on EC-Council's infrastructure. In this video, I walk through: 🔹 The original PoC and vulnerable search parameter 🔹 How it exposed backend MySQL databases 🔹 The Zendesk disclosure timeline & remediation 🔹 Landing a spot on the Bug Bounty Hall of Fame! 🏆 Watch the full walkthrough here 👇 🔗 https://youtu.be/hwGjbeEOIwM

Your Firefox deserves a better terminal. CyberTerminus: a dark, cyber-inspired Firefox theme built for people who live in terminals, browsers, and security labs. If that sounds like your setup, give it a try: https://addons.mozilla.org/en-US/firefox/addon/zishanadthandar-cyberterminus/ Firefox Add-ons

📌 Official Announcement from ZishanHack If you're preparing for OSCP / OSCP+, this is important. After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on: 👉 https://zishanhack.com It is a professional, exam-focused Obsidian vault built to give learners: - A clean command-first structure - Fast workflow navigation - Practical enumeration to exploitation flow - Realistic privilege escalation patterns - Pivoting & tunneling references - Zero clutter - Pure exam-ready efficiency - Many OSCP learners waste months building their notes from scratch. This vault removes that burden entirely. I created it because the OSCP journey becomes significantly easier when your notes are: - Organized - Searchable - Linked - Structured - Built for high-speed execution - Designed for exam pressure If you want a cleaner, faster, more reliable OSCP workflow, the download is available here: 👉 https://zishanhack.com This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder. Feel free to share this with anyone preparing for OSCP. - Zishan Ahamed Thandar

🚀 OSCP COMMANDS – OBSIDIAN VAULT Save Hours in the Exam. Instant Command Recall. OSCP isn't about knowing what tool exists. It's about recalling the right command instantly — under pressure, without panic. 📦 What's Inside: • Enumeration – FTP, SSH, SMB, HTTP, DNS, LDAP, RDP • Privilege Escalation – Linux & Windows decision trees • Web Exploitation – SQLi, file upload, LFI/RFI bypass • Active Directory – Domain enum, lateral movement • Post-Exploitation – Cred dumping, persistence ⚡️ Why Obsidian: 🔗 Internal links between techniques 🔍 Instant search across commands 🧠 Knowledge graph for connections ✏️ Easy to extend with your notes 🎁 What You Get: • OSCP Commands Obsidian Vault • Categorized command notes • Linked attack flows • Lifetime updates · Instant access 🚀 LIMITED-TIME OFFER $997 $97 (90% OFF) 👉 https://zishanhack.com/blog/blog/2025/12/24/oscp-commands-obsidian/ One-time payment. No subscriptions. Lifetime updates.

## 🚀 Ultimate Web Security Checklist — Now Available If you’re into bug bounty, pentesting, or structured web app testing, this will save you serious time. The Ultimate Web Security Checklist is a professionally organized reference guide built to help you test applications methodically — without missing important areas. Inside you’ll get: ✅ 300+ structured security test points ✅ Coverage across major vulnerability categories ✅ Clear, organized testing flow ✅ Practical tool references ✅ Clean, easy-to-use PDF format This is not a course. It’s a disciplined testing framework for those who already understand web security and want a repeatable, professional approach. Stop relying on memory. Start relying on structure. 👉 Get access here: https://zishanhack.com/products/web-security-checklist

📌 Official Announcement from ZishanHack If you're preparing for OSCP / OSCP+, this is important. After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on: 👉 https://zishanhack.com It is a professional, exam-focused Obsidian vault built to give learners: - A clean command-first structure - Fast workflow navigation - Practical enumeration to exploitation flow - Realistic privilege escalation patterns - Pivoting & tunneling references - Zero clutter - Pure exam-ready efficiency - Many OSCP learners waste months building their notes from scratch. This vault removes that burden entirely. I created it because the OSCP journey becomes significantly easier when your notes are: - Organized - Searchable - Linked - Structured - Built for high-speed execution - Designed for exam pressure If you want a cleaner, faster, more reliable OSCP workflow, the download is available here: 👉 https://zishanhack.com This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder. Feel free to share this with anyone preparing for OSCP. - Zishan Ahamed Thandar

📌 Official Announcement from ZishanHack If you're preparing for OSCP / OSCP+, this is important. After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on: 👉 https://zishanhack.com It is a professional, exam-focused Obsidian vault built to give learners: - A clean command-first structure - Fast workflow navigation - Practical enumeration to exploitation flow - Realistic privilege escalation patterns - Pivoting & tunneling references - Zero clutter - Pure exam-ready efficiency - Many OSCP learners waste months building their notes from scratch. This vault removes that burden entirely. I created it because the OSCP journey becomes significantly easier when your notes are: - Organized - Searchable - Linked - Structured - Built for high-speed execution - Designed for exam pressure If you want a cleaner, faster, more reliable OSCP workflow, the download is available here: 👉 https://zishanhack.com This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder. Feel free to share this with anyone preparing for OSCP. - Zishan Ahamed Thandar

🔐 Ultimate Web Security Checklist for Bug Bounty Hunter Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content. You’ll get: ✅ Tactical recon to exploitation flow ✅ Field-tested tools, payloads, and scripts ✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more ✅ Made to level up hunters, pentesters, and CTF players 🧠 Used by security professionals worldwide. 🚀 Perfect for live hacking prep, client audits, and fast bug validation. 📥 Get instant access now → 👉 https://zishanhack.com ⚠️ Limited-Time Deal Active — Almost 90% OFF This discount will expire without warning. Don't miss it.

🔐 Ultimate Web Security Checklist for Bug Bounty Hunter Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content. You’ll get: ✅ Tactical recon to exploitation flow ✅ Field-tested tools, payloads, and scripts ✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more ✅ Made to level up hunters, pentesters, and CTF players 🧠 Used by security professionals worldwide. 🚀 Perfect for live hacking prep, client audits, and fast bug validation. 📥 Get instant access now → 👉 https://zishanhack.com ⚠️ Limited-Time Deal Active — Almost 90% OFF This discount will expire without warning. Don't miss it.

🚀 New Tool for Pentesters & Bug Bounty Hunters I’ve released a Firefox addon that makes proxy switching instant. Burp → Tor → Direct in ONE click ⚡️ No manual proxy setup. No repeated configuration. Just pure speed. Demo Video: https://youtu.be/lu_f-74wVME Addon Download: https://addons.mozilla.org/en-US/firefox/addon/hackerproxypro/ Source Code: https://github.com/ZishanAdThandar/HackerProxyPro If you use Burp Suite or Tor regularly, this addon will save you serious time. Give it a try and let me know your thoughts.

[ Try this firefox proxy addon ] $ Features - Burp Suite Proxy in one click - TOR proxy in one click (when tor service is running on port 9050) - Onion site access in firefox - Lite on RAM - Easy to understand - Faster than all other similar https://addons.mozilla.org/en-US/firefox/addon/hackerproxypro/

# Check Website Dorker Pro is now available for free as fully open source project https://github.com/ZishanAdThandar/WebsiteDorkerPro ## Installation Command

python3 -m pip install website-dorker-pro

## Usage ### GUI Interface

websitedorkerpro --gui
# or
wdp --gui

### CLI Interface

# Quick reconnaissance scan
websitedorkerpro example.com --quick-scan

# Specific dork category
websitedorkerpro example.com --category subdomains

# Custom dork
websitedorkerpro example.com --dork "site:{domain} ext:pdf"

# List available categories

websitedorkerpro --list-categories

🔐 Ultimate Web Security Checklist Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content. You’ll get: ✅ Tactical recon to exploitation flow ✅ Field-tested tools, payloads, and scripts ✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more ✅ Made to level up hunters, pentesters, and CTF players 🧠 Used by security professionals worldwide. 🚀 Perfect for live hacking prep, client audits, and fast bug validation. 📥 Get instant access now → 👉 https://topmate.io/zishanadthandar/1523473 ⚠️ Limited-Time Deal Active — Almost 90% OFF This discount will expire without warning. Don't miss it.

🔐 Ultimate Web Security Checklist Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content. You’ll get: ✅ Tactical recon to exploitation flow ✅ Field-tested tools, payloads, and scripts ✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more ✅ Made to level up hunters, pentesters, and CTF players 🧠 Used by security professionals worldwide. 🚀 Perfect for live hacking prep, client audits, and fast bug validation. 📥 Get instant access now → 👉 https://topmate.io/zishanadthandar/1523473 ⚠️ Limited-Time Deal Active — Almost 90% OFF This discount will expire without warning. Don't miss it.

Beginner to Pentesting follow this, https://zishanadthandar.github.io/pentest/

JOIN Our Official Discord https://discord.gg/T47v67eVT4

🔐 Ultimate Web Security Checklist Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content. You’ll get: ✅ Tactical recon to exploitation flow ✅ Field-tested tools, payloads, and scripts ✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more ✅ Made to level up hunters, pentesters, and CTF players 🧠 Used by security professionals worldwide. 🚀 Perfect for live hacking prep, client audits, and fast bug validation. 📥 Get instant access now → 👉 https://topmate.io/zishanadthandar/1523473 ⚠️ Limited-Time Deal Active — Almost 90% OFF This discount will expire without warning. Don't miss it.