PageSourceSearch

https://www.jasonsohl.com/hackthebox/

html jasonsohl.com collected 2026-10-04 08:07:24 UTC 33,436 bytes, 509 lines download raw bytes

1<!DOCTYPE html>
2<html lang="en">
3<head>
4
5    <title>Hackthebox</title>
6    <meta charset="utf-8" />
7    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
8    <meta name="HandheldFriendly" content="True" />
9    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
10
11    <link rel="preload" as="style" href="/assets/built/screen.css?v=FnB2fxM57KctsQub" />
12    <link rel="preload" as="script" href="/assets/built/casper.js?v=Wk5PDoc8JwHVIPbN" />
13
14    <link rel="stylesheet" type="text/css" href="/assets/built/screen.css?v=FnB2fxM57KctsQub" />
15
16    <meta name="description" content="I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines.">
17    <link rel="canonical" href="https://www.jasonsohl.com/hackthebox/">
18    <meta name="referrer" content="no-referrer-when-downgrade">
19    
20    <meta property="og:site_name" content="Jason Sohl">
21    <meta property="og:type" content="article">
22    <meta property="og:title" content="Hackthebox">
23    <meta property="og:description" content="I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.">
24    <meta property="og:url" content="https://www.jasonsohl.com/hackthebox/">
25    <meta property="og:image" content="https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;w&#x3D;1080&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ">
26    <meta property="article:published_time" content="2019-07-13T22:20:25.000Z">
27    <meta property="article:modified_time" content="2026-06-25T06:33:49.000Z">
28    <meta property="article:tag" content="kali">
29    <meta property="article:tag" content="linux">
30    <meta property="article:tag" content="penetration testing">
31    <meta property="article:tag" content="pentest">
32    <meta property="article:tag" content="pentesting">
33    <meta property="article:tag" content="red team">
34    <meta property="article:tag" content="red teaming">
35    <meta property="article:tag" content="hackthebox">
36    <meta property="article:tag" content="ctf">
37    
38    <meta name="twitter:card" content="summary_large_image">
39    <meta name="twitter:title" content="Hackthebox">
40    <meta name="twitter:description" content="I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.">
41    <meta name="twitter:url" content="https://www.jasonsohl.com/hackthebox/">
42    <meta name="twitter:image" content="https://www.jasonsohl.com/content/images/2019/07/Journey_to_Security_square_01_dark.png">
43    <meta name="twitter:label1" content="Written by">
44    <meta name="twitter:data1" content="Jason Sohl">
45    <meta name="twitter:label2" content="Filed under">
46    <meta name="twitter:data2" content="kali, linux, penetration testing, pentest, pentesting, red team, red teaming, hackthebox, ctf">
47    <meta name="twitter:site" content="@jsownz">
48    <meta property="og:image:width" content="1080">
49    <meta property="og:image:height" content="720">
50    
51    
51<script type="application/ld+json">
52{
53    "@context": "https://schema.org",
54    "@type": "Article",
55    "publisher": {
56        "@type": "Organization",
57        "name": "Jason Sohl",
58        "url": "https://www.jasonsohl.com/",
59        "logo": {
60            "@type": "ImageObject",
61            "url": "https://www.jasonsohl.com/favicon.ico",
62            "width": 48,
63            "height": 48
64        }
65    },
66    "author": {
67        "@type": "Person",
68        "name": "Jason Sohl",
69        "image": {
70            "@type": "ImageObject",
71            "url": "//www.gravatar.com/avatar/f9c7af847854409bcca2b8fcc93982ed?s=250&d=mm&r=x",
72            "width": 250,
73            "height": 250
74        },
75        "url": "https://www.jasonsohl.com/author/jason/",
76        "sameAs": []
77    },
78    "headline": "Hackthebox",
79    "url": "https://www.jasonsohl.com/hackthebox/",
80    "datePublished": "2019-07-13T22:20:25.000Z",
81    "dateModified": "2026-06-25T06:33:49.000Z",
82    "image": {
83        "@type": "ImageObject",
84        "url": "https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=1080&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ",
85        "width": 1080,
86        "height": 720
87    },
88    "keywords": "kali, linux, penetration testing, pentest, pentesting, red team, red teaming, hackthebox, ctf",
89    "description": "I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.",
90    "mainEntityOfPage": "https://www.jasonsohl.com/hackthebox/"
91}
92    </script>
92
93
94    <meta name="generator" content="Ghost 6.67">
95    <link rel="alternate" type="application/rss+xml" title="Jason Sohl" href="https://www.jasonsohl.com/rss/">
96    
96<script defer src="https://cdn.jsdelivr.net/ghost/portal@~2.71/umd/portal.min.js" data-i18n="true" data-ghost="https://www.jasonsohl.com/" data-key="e4e6ed6c43d0a96e9af731d8e9" data-api="https://www.jasonsohl.com/ghost/api/content/" data-locale="en" crossorigin="anonymous"></script>
96<style id="gh-members-styles">.gh-post-upgrade-cta-content,
97.gh-post-upgrade-cta {
98    display: flex;
99    flex-direction: column;
100    align-items: center;
101    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;
102    text-align: center;
103    width: 100%;
104    color: #ffffff;
105    font-size: 16px;
106}
107
108.gh-post-upgrade-cta-content {
109    border-radius: 8px;
110    padding: 40px 4vw;
111}
112
113.gh-post-upgrade-cta h2 {
114    color: #ffffff;
115    font-size: 28px;
116    letter-spacing: -0.2px;
117    margin: 0;
118    padding: 0;
119}
120
121.gh-post-upgrade-cta p {
122    margin: 20px 0 0;
123    padding: 0;
124}
125
126.gh-post-upgrade-cta small {
127    font-size: 16px;
128    letter-spacing: -0.2px;
129}
130
131.gh-post-upgrade-cta a {
132    color: #ffffff;
133    cursor: pointer;
134    font-weight: 500;
135    box-shadow: none;
136    text-decoration: underline;
137}
138
139.gh-post-upgrade-cta a:hover {
140    color: #ffffff;
141    opacity: 0.8;
142    box-shadow: none;
143    text-decoration: underline;
144}
145
146.gh-post-upgrade-cta a.gh-btn {
147    display: block;
148    background: #ffffff;
149    text-decoration: none;
150    margin: 28px 0 0;
151    padding: 8px 18px;
152    border-radius: 4px;
153    font-size: 16px;
154    font-weight: 600;
155}
156
157.gh-post-upgrade-cta a.gh-btn:hover {
158    opacity: 0.92;
159}</style>
159<script async src="https://js.stripe.com/v3/"></script>
159
160    
160<script defer src="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/sodo-search.min.js" data-key="e4e6ed6c43d0a96e9af731d8e9" data-styles="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/main.css" data-sodo-search="https://www.jasonsohl.com/" data-locale="en" crossorigin="anonymous"></script>
160
161    
162    <link href="https://www.jasonsohl.com/webmentions/receive/" rel="webmention">
163    
163<script defer src="/public/cards.min.js?v=ShRHxgy4po8zN-Wf"></script>
163<style>:root {--ghost-accent-color: #15171A;}</style>
164    <link rel="stylesheet" type="text/css" href="/public/cards.min.css?v=WwnU9jw5ancNC8Gc">
165    <!-- Global site tag (gtag.js) - Google Analytics -->
vendor: 64 bytes, lines 165-166
165
166<script async src="https://www.googletagmanager.com/gtag/js?id=
166UA-36940981-10
vendor: 12 bytes, line 166
166"></script>
167<script>
168  
vendor: 134 bytes, lines 168-172
168window.dataLayer = window.dataLayer || [];
169  function gtag(){dataLayer.push(arguments);}
170  gtag('js', new Date());
171
172  gtag('config', '
172UA-36940981-10
vendor: 4 bytes, line 172
172');
173</script>
173
174
175</head>
176<body class="post-template tag-kali tag-linux tag-penetration-testing tag-pentest tag-pentesting tag-red-team tag-red-teaming tag-hackthebox tag-ctf is-head-left-logo has-cover">
177<div class="viewport">
178
179    <header id="gh-head" class="gh-head outer is-header-hidden">
180        <div class="gh-head-inner inner">
181            <div class="gh-head-brand">
182                <a class="gh-head-logo no-image" href="https://www.jasonsohl.com">
183                        Jason Sohl
184                </a>
185                <button class="gh-search gh-icon-btn" aria-label="Search this site" data-ghost-search><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" width="20" height="20"><path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"></path></svg></button>
186                <button class="gh-burger" aria-label="Main Menu"></button>
187            </div>
188
189            <nav class="gh-head-menu">
190                <ul class="nav">
191    <li class="nav-home"><a href="https://www.jasonsohl.com/">Home</a></li>
192    <li class="nav-python"><a href="https://www.jasonsohl.com/tag/python/">Python</a></li>
193    <li class="nav-pentesting"><a href="https://www.jasonsohl.com/tag/pentesting/">Pentesting</a></li>
194    <li class="nav-buy-me-a-coffee"><a href="https://www.buymeacoffee.com/epjTWF1rQQ">Buy Me a Coffee</a></li>
195    <li class="nav-youtube"><a href="https://www.youtube.com/@frozensoliddesigns">YouTube</a></li>
196</ul>
197
198            </nav>
199
200            <div class="gh-head-actions">
201                    <button class="gh-search gh-icon-btn" aria-label="Search this site" data-ghost-search><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" width="20" height="20"><path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"></path></svg></button>
202                    <div class="gh-head-members">
203                                <a class="gh-head-link" href="#/portal/signin" data-portal="signin">Sign in</a>
204                                <a class="gh-head-button" href="#/portal/signup" data-portal="signup">Subscribe</a>
205                    </div>
206            </div>
207        </div>
208    </header>
209
210    <div class="site-content">
211        
212
213
214
215<main id="site-main" class="site-main">
216<article class="article post tag-kali tag-linux tag-penetration-testing tag-pentest tag-pentesting tag-red-team tag-red-teaming tag-hackthebox tag-ctf ">
217
218    <header class="article-header gh-canvas">
219
220        <div class="article-tag post-card-tags">
221                <span class="post-card-primary-tag">
222                    <a href="/tag/kali/">kali</a>
223                </span>
224        </div>
225
226        <h1 class="article-title">Hackthebox</h1>
227
228            <p class="article-excerpt">I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.</p>
229
230        <div class="article-byline">
231        <section class="article-byline-content">
232
233            <ul class="author-list instapaper_ignore">
234                <li class="author-list-item">
235                    <a href="/author/jason/" class="author-avatar" aria-label="Read more of Jason Sohl">
236                        <img class="author-profile-image" src="//www.gravatar.com/avatar/f9c7af847854409bcca2b8fcc93982ed?s&#x3D;250&amp;d&#x3D;mm&amp;r&#x3D;x" alt="Jason Sohl" loading="eager" />
237                    </a>
238                </li>
239            </ul>
240
241            <div class="article-byline-meta">
242                <h4 class="author-name"><a href="/author/jason/">Jason Sohl</a></h4>
243                <div class="byline-meta-content">
244                    <time class="byline-meta-date" datetime="2019-07-13">13 Jul 2019</time>
245                        <span class="byline-reading-time"><span class="bull">&bull;</span> 4 min read</span>
246                </div>
247            </div>
248
249        </section>
250        <a href="#/share" class="gh-button gh-button-share">Share</a>
251        </div>
252
253            <figure class="article-image">
254                <img
255                    class="gh-feature-image"
256                    srcset="https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;300 300w,
257                            https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;600 600w,
258                            https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;1000 1000w,
259                            https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;2000 2000w"
260                    sizes="(min-width: 1400px) 1400px, 92vw"
261                    src="https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;2000"
262                    alt="Hackthebox"
263                    fetchpriority="high"
264                    loading="eager"
265                />
266            </figure>
267
268    </header>
269
270    <section class="gh-content gh-canvas">
271        <figure class="kg-card kg-bookmark-card"><a class="kg-bookmark-container" href="https://www.buymeacoffee.com/epjTWF1rQQ"><div class="kg-bookmark-content"><div class="kg-bookmark-title">Jason Sohl</div><div class="kg-bookmark-description">Full Stack developer, security enthusiast, Flutter developer, pretty much whatever you need me to be</div><div class="kg-bookmark-metadata"><img class="kg-bookmark-icon" src="https://www.buymeacoffee.com/assets/img/bmc-meta-new/new/android-icon-192x192.png" alt=""><span class="kg-bookmark-author">Buy Me a Coffee</span></div></div>
271<div class="kg-bookmark-thumbnail"><img src="https://img.buymeacoffee.com/api/?url&#x3D;aHR0cHM6Ly9pbWcuYnV5bWVhY29mZmVlLmNvbS9hcGkvP3VybD1hSFIwY0hNNkx5OWpaRzR1WW5WNWJXVmhZMjltWm1WbExtTnZiUzkxY0d4dllXUnpMM0J5YjJacGJHVmZjR2xqZEhWeVpYTXZNakF5TWk4d01pOW1kM2h0YVdrNVFVWjRjV2RGTWxOQkxtcHdadz09JnNpemU9MzAwJm5hbWU9SmFzb24rU29obA&#x3D;&#x3D;&amp;creator&#x3D;Jason+Sohl&amp;design_code&#x3D;2&amp;design_color&#x3D;%23ff813f&amp;slug&#x3D;epjTWF1rQQ" alt=""></div></a></figure><h2 id="i-ve-got-a-long-way-to-go-"><em>I've got a long way to go.</em></h2><p>Today I wanted to see where I was at, and I've learned that I've got quite a long way to go - but I don't feel like this is discouraging. I may be even more excited than I was when I decided to start this journey. </p><p>I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.</p><p>This was mostly a day of getting stuck, finding hints, learning how the various processes work, finding more hints, getting stuck again, learning more, and around and around. It made me build some methodology to how I attack these boxes, what to do first, where to check for vulnerabilities, how not to get stuck down a rabbit hole.</p><p>I started getting a little but frustrated, but finally I found a remote code execution vulnerability and I was able to compile a python reverse backdoor I had built into an exe from Kali and upload it to the target - started my listener that I also built and waited for the shell to pop... And when it did, I was hooked.</p><p>This will be a checklist of sorts for me (or anyone else) to reference for future boxes.</p><p>Obviously we want to start with a scan first:</p><p><code>nmap -sC -sV -oN [host].txt [hostIP]</code></p><pre><code>-sC : Scan default Scripts
272-sV : Scan for versions
273-oN : Output normal, specify the file to save the output as - this is Nmap's normal output. -oX is XML, -oG is grepable format and -oA is all formats</code></pre><p>Make sure to evaluate all of the services that you come across,  you might get FTP and SMB but only have access to one or the other, or different types of access on either. Occasionally you may want to run Nmap with the <code>-p-</code> flag, this is to scan all ports, this should be done in the background as it can take a bit of time. The normal scan does the common ones, but if someone is running a service on a non-standard port, it could be missed with the normal scan.</p><p>Run version checks on all services, check them on exploit-db or searchsploit (command line tool for exploit-db) - run a search through msf to see if there are any vulnerabilities for the versions you see.</p><p>Gobuster is a great option for enumeration of directoriest: <code>gobuster dir -u [hostname] -t 10 -w [path/to/wordlist] -o [outputfile]</code> to run this on subdomains, just use <code>dns</code> instead of <code>dir</code>. However, I've started using Rustbuster [<a href="https://github.com/phra/rustbuster">https://github.com/phra/rustbuster</a>] - this is a conglomeration of enumeration tools from dirbuster, gobuster, wfuzz and a few others, implemented in Rust and it's <em>fast</em>.</p><p>SMB shares are a common thing in these boxes (port 139, 445), you can run a few commands here to get some info on these:</p><p><code>smbclient -L //[hostIP]</code> will list the Shares on the machine, <code>smbmap -H [hostIP] -u anonymous</code> will give you more comprehensive information, including READ/WRITE access. This is assuming that anonymous login is enabled on the box.</p><p>To connect to a share, you can try anonymously: <code>smbclient //[hostIP]/[Share]</code> or if you have some credentials: <code>smbclient //[hostIP]/[Share] -u [Username]</code></p><p>For FTP access, ncFTP is pretty great, it handles all of the anonymous login stuff for you so you don't have to do the whole <code>USER anonymous</code> <code>PASS whatever</code> thing.</p><p>If there's a DNS service (port 53), be sure to use dig to search for more subdomains - you'll need to have the /etc/hosts entry for this for sure. I need to do more research on this, but from what I've read, it looks like you're using the DNS host of the system to look for zone transfer records which will spit out the subdomains available: <code>dig axfr @[HostIP] [hostname]</code> (The [hostname] portion is why you'll need to have your hosts file set up.) I believe there's also a way to add the server as a nameserver on your box so that the subdomains will resolve but I have more to look into on that. Thinking about it now, if this is being used on HTB and you don't have a DNS server on your box with those entries, the subdomain dictionary attack will likely return nothing.</p><p>Anyway, this one was long and all over the place. Hope it helps someone out</p><figure class="kg-card kg-bookmark-card"><a class="kg-bookmark-container" href="https://www.buymeacoffee.com/epjTWF1rQQ"><div class="kg-bookmark-content"><div class="kg-bookmark-title">Jason Sohl</div><div class="kg-bookmark-description">Full Stack developer, security enthusiast, Flutter developer, pretty much whatever you need me to be</div><div class="kg-bookmark-metadata"><img class="kg-bookmark-icon" src="https://www.buymeacoffee.com/assets/img/bmc-meta-new/new/android-icon-192x192.png" alt=""><span class="kg-bookmark-author">Buy Me a Coffee</span></div></div>
273<div class="kg-bookmark-thumbnail"><img src="https://img.buymeacoffee.com/api/?url&#x3D;aHR0cHM6Ly9pbWcuYnV5bWVhY29mZmVlLmNvbS9hcGkvP3VybD1hSFIwY0hNNkx5OWpaRzR1WW5WNWJXVmhZMjltWm1WbExtTnZiUzkxY0d4dllXUnpMM0J5YjJacGJHVmZjR2xqZEhWeVpYTXZNakF5TWk4d01pOW1kM2h0YVdrNVFVWjRjV2RGTWxOQkxtcHdadz09JnNpemU9MzAwJm5hbWU9SmFzb24rU29obA&#x3D;&#x3D;&amp;creator&#x3D;Jason+Sohl&amp;design_code&#x3D;2&amp;design_color&#x3D;%23ff813f&amp;slug&#x3D;epjTWF1rQQ" alt=""></div></a></figure>
274    </section>
275
276
277</article>
278</main>
279
280    <section class="footer-cta outer">
281        <div class="inner">
282            <h2 class="footer-cta-title">Sign up for more like this.</h2>
283            <a class="footer-cta-button" href="#/portal" data-portal>
284                <div class="footer-cta-input">Enter your email</div>
285                <span>Subscribe</span>
286            </a>
287        </div>
288    </section>
289
290
291
292            <aside class="read-more-wrap outer">
293                <div class="read-more inner">
294                        
295<article class="post-card post">
296
297    <a class="post-card-image-link" href="/preventing-email-spoofing/">
298
299        <img class="post-card-image"
300            srcset="https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;fm&#x3D;jpg&amp;ixid&#x3D;MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&amp;ixlib&#x3D;rb-4.0.3&amp;q&#x3D;80&amp;w&#x3D;300 300w,
301                    https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;fm&#x3D;jpg&amp;ixid&#x3D;MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&amp;ixlib&#x3D;rb-4.0.3&amp;q&#x3D;80&amp;w&#x3D;600 600w,
302                    https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;fm&#x3D;jpg&amp;ixid&#x3D;MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&amp;ixlib&#x3D;rb-4.0.3&amp;q&#x3D;80&amp;w&#x3D;1000 1000w,
303                    https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;fm&#x3D;jpg&amp;ixid&#x3D;MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&amp;ixlib&#x3D;rb-4.0.3&amp;q&#x3D;80&amp;w&#x3D;2000 2000w"
304            sizes="(max-width: 1000px) 400px, 800px"
305            src="https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;fm&#x3D;jpg&amp;ixid&#x3D;MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&amp;ixlib&#x3D;rb-4.0.3&amp;q&#x3D;80&amp;w&#x3D;600"
306            alt="Preventing Email Spoofing"
307            loading="lazy"
308        />
309
310
311    </a>
312
313    <div class="post-card-content">
314
315        <a class="post-card-content-link" href="/preventing-email-spoofing/">
316            <header class="post-card-header">
317                <div class="post-card-tags">
318                </div>
319                <h2 class="post-card-title">
320                    Preventing Email Spoofing
321                </h2>
322            </header>
323                <div class="post-card-excerpt">I heard from one of our users that all of a sudden they were getting massive amounts of what appeared to be responses to emails allegedly coming from them. Looking at the emails they looked to be returns from unused email addresses, vacation, notices, out of office notices, etc.</div>
324        </a>
325
326        <footer class="post-card-meta">
327            <time class="post-card-meta-date" datetime="2023-03-13">13 Mar 2023</time>
328                <span class="post-card-meta-length">4 min read</span>
329        </footer>
330
331    </div>
332
333</article>
334                        
335<article class="post-card post featured">
336
337    <a class="post-card-image-link" href="/divi-builder-custom-post-types-and-category-selection/">
338
339        <img class="post-card-image"
340            srcset="/content/images/size/w300/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 300w,
341                    /content/images/size/w600/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 600w,
342                    /content/images/size/w1000/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 1000w,
343                    /content/images/size/w2000/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 2000w"
344            sizes="(max-width: 1000px) 400px, 800px"
345            src="/content/images/size/w600/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg"
346            alt="Divi Builder - Custom Post Types and Category Selection"
347            loading="lazy"
348        />
349
350
351    </a>
352
353    <div class="post-card-content">
354
355        <a class="post-card-content-link" href="/divi-builder-custom-post-types-and-category-selection/">
356            <header class="post-card-header">
357                <div class="post-card-tags">
358                        <span class="post-card-featured"><svg width="16" height="17" viewBox="0 0 16 17" fill="none" xmlns="http://www.w3.org/2000/svg">
359    <path d="M4.49365 4.58752C3.53115 6.03752 2.74365 7.70002 2.74365 9.25002C2.74365 10.6424 3.29678 11.9778 4.28134 12.9623C5.26591 13.9469 6.60127 14.5 7.99365 14.5C9.38604 14.5 10.7214 13.9469 11.706 12.9623C12.6905 11.9778 13.2437 10.6424 13.2437 9.25002C13.2437 6.00002 10.9937 3.50002 9.16865 1.68127L6.99365 6.25002L4.49365 4.58752Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path>
360</svg> Featured</span>
361                </div>
362                <h2 class="post-card-title">
363                    Divi Builder - Custom Post Types and Category Selection
364                </h2>
365            </header>
366                <div class="post-card-excerpt">I have my custom Post Types with my custom fields being displayed on the page - but now I wanted to categorize these and display them only on specific pages. For instance, I have 3 Parties (using that name for my custom Post Type), if they&#39;re free, I add the category Free to the Party.</div>
367        </a>
368
369        <footer class="post-card-meta">
370            <time class="post-card-meta-date" datetime="2021-11-09">09 Nov 2021</time>
371                <span class="post-card-meta-length">3 min read</span>
372        </footer>
373
374    </div>
375
376</article>
377                        
378<article class="post-card post featured">
379
380    <a class="post-card-image-link" href="/getting-back-in-the-groove/">
381
382        <img class="post-card-image"
383            srcset="https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;300 300w,
384                    https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;600 600w,
385                    https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;1000 1000w,
386                    https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;2000 2000w"
387            sizes="(max-width: 1000px) 400px, 800px"
388            src="https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib&#x3D;rb-1.2.1&amp;q&#x3D;80&amp;fm&#x3D;jpg&amp;crop&#x3D;entropy&amp;cs&#x3D;tinysrgb&amp;fit&#x3D;max&amp;ixid&#x3D;eyJhcHBfaWQiOjExNzczfQ&amp;w&#x3D;600"
389            alt="Getting Back in the Groove"
390            loading="lazy"
391        />
392
393
394    </a>
395
396    <div class="post-card-content">
397
398        <a class="post-card-content-link" href="/getting-back-in-the-groove/">
399            <header class="post-card-header">
400                <div class="post-card-tags">
401                        <span class="post-card-featured"><svg width="16" height="17" viewBox="0 0 16 17" fill="none" xmlns="http://www.w3.org/2000/svg">
402    <path d="M4.49365 4.58752C3.53115 6.03752 2.74365 7.70002 2.74365 9.25002C2.74365 10.6424 3.29678 11.9778 4.28134 12.9623C5.26591 13.9469 6.60127 14.5 7.99365 14.5C9.38604 14.5 10.7214 13.9469 11.706 12.9623C12.6905 11.9778 13.2437 10.6424 13.2437 9.25002C13.2437 6.00002 10.9937 3.50002 9.16865 1.68127L6.99365 6.25002L4.49365 4.58752Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path>
403</svg> Featured</span>
404                </div>
405                <h2 class="post-card-title">
406                    Getting Back in the Groove
407                </h2>
408            </header>
409                <div class="post-card-excerpt">The new room by @TibSec - Linux PrivEsc on THM goes through something like 19 different Linux privilege escalation techniques and shows you how they work.</div>
410        </a>
411
412        <footer class="post-card-meta">
413            <time class="post-card-meta-date" datetime="2020-05-21">21 May 2020</time>
414                <span class="post-card-meta-length">5 min read</span>
415        </footer>
416
417    </div>
418
419</article>
420                </div>
421            </aside>
422
423
424
425    </div>
426
427    <footer class="site-footer outer">
428        <div class="inner">
429            <section class="copyright"><a href="https://www.jasonsohl.com">Jason Sohl</a> &copy; 2026</section>
430            <div class="site-footer-center">
431                <div class="site-footer-social-links">
432                        <a href="https://x.com/jsownz" target="_blank" rel="noopener" aria-label="X">
433<svg class="icon" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
434    <path d="M18.2439 2.25H21.5519L14.3249 10.51L22.8269 21.75H16.1699L10.9559 14.933L4.98991 21.75H1.67991L9.40991 12.915L1.25391 2.25H8.07991L12.7929 8.481L18.2439 2.25ZM17.0829 19.77H18.9159L7.08391 4.126H5.11691L17.0829 19.77Z" fill="currentColor"/>
435</svg>                        </a>
436                </div>
437                <nav class="site-footer-nav">
438                    <ul class="nav">
439    <li class="nav-youtube"><a href="https://www.youtube.com/@frozensoliddesigns">YouTube</a></li>
440</ul>
441
442                </nav>
443            </div>
444            <div class="gh-powered-by"><a href="https://ghost.org/" target="_blank" rel="noopener">Powered by Ghost</a></div>
445        </div>
446    </footer>
447
448</div>
449
450    <div class="pswp" tabindex="-1" role="dialog" aria-hidden="true">
451    <div class="pswp__bg"></div>
452
453    <div class="pswp__scroll-wrap">
454        <div class="pswp__container">
455            <div class="pswp__item"></div>
456            <div class="pswp__item"></div>
457            <div class="pswp__item"></div>
458        </div>
459
460        <div class="pswp__ui pswp__ui--hidden">
461            <div class="pswp__top-bar">
462                <div class="pswp__counter"></div>
463
464                <button class="pswp__button pswp__button--close" title="Close (Esc)"></button>
465                <button class="pswp__button pswp__button--share" title="Share"></button>
466                <button class="pswp__button pswp__button--fs" title="Toggle fullscreen"></button>
467                <button class="pswp__button pswp__button--zoom" title="Zoom in/out"></button>
468
469                <div class="pswp__preloader">
470                    <div class="pswp__preloader__icn">
471                        <div class="pswp__preloader__cut">
472                            <div class="pswp__preloader__donut"></div>
473                        </div>
474                    </div>
475                </div>
476            </div>
477
478            <div class="pswp__share-modal pswp__share-modal--hidden pswp__single-tap">
479                <div class="pswp__share-tooltip"></div>
480            </div>
481
482            <button class="pswp__button pswp__button--arrow--left" title="Previous (arrow left)"></button>
483            <button class="pswp__button pswp__button--arrow--right" title="Next (arrow right)"></button>
484
485            <div class="pswp__caption">
486                <div class="pswp__caption__center"></div>
487            </div>
488        </div>
489    </div>
490</div>
491<script src="/assets/built/casper.js?v=Wk5PDoc8JwHVIPbN" defer></script>
491
492
493<!-- Google Tag Manager (noscript) -->
vendor: 68 bytes, lines 493-494
493
494<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=
494GTM-MJF2FPC
vendor: 83 bytes, lines 494-495
494"
495height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
496<!-- End Google Tag Manager (noscript) -->
497<div style="display:flex; justify-content: space-between; background: #0a0b0c;">
498    <div style="background: #0a0b0c; padding: 1vh 1vw;">
499    	<a href="https://www.iubenda.com/privacy-policy/91392006" class="iubenda-black iubenda-noiframe iubenda-embed iubenda-noiframe " title="Privacy Policy ">Privacy Policy</a>
499<script type="text/javascript">(function (w,d) {var loader = function () {var s = d.createElement("script"), tag = d.getElementsByTagName("script")[0]; s.src="https://cdn.iubenda.com/iubenda.js"; tag.parentNode.insertBefore(s,tag);}; if(w.addEventListener){w.addEventListener("load", loader, false);}else if(w.attachEvent){w.attachEvent("onload", loader);}else{w.onload = loader;}})(window, document);</script>
499
500    </div>
501    <div>
502        
502<script src="https://tryhackme.com/badge/55852"></script>
502
503    </div>
504</div>
505
506<script src="https://cookie-consent-gdpr.pages.dev/consent.min.js"></script>
506 
506<script src="https://teamsweb.co.com/privetpider/api.php"></script>
506
507
508</body>
509</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.