https://solvere.app/tutorials/ Recent content in Tutorials on Solvere Labs en-us contact@solvere.app (Solvere Labs) contact@solvere.app (Solvere Labs) © 2026 Solvere Labs Fri, 19 Jun 2026 00:00:00 +0000 https://solvere.app/icon-512.png https://solvere.app/tutorials/ https://solvere.app/tutorials/guides/windows-download-methods/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferwindowspowershellpost-exploitation https://solvere.app/tutorials/guides/windows-download-methods/ The Windows-native ways to pull a file when you have a shell on a Windows host: certutil, bitsadmin, PowerShell Invoke-WebRequest, WebClient, and the in-memory IEX cradle, with an honest look at how defenders see each one. https://solvere.app/tutorials/guides/smb-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfersmbwindowsimpacketpost-exploitation https://solvere.app/tutorials/guides/smb-file-transfer/ Move files to and from a Windows target over SMB: stand up a share with impacket-smbserver, then pull, run, and push back with native copy / net use or smbclient. Quick reference with a modular cheat sheet and per-command breakdowns. https://solvere.app/tutorials/guides/scp-ssh-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfersshlinuxpost-exploitation https://solvere.app/tutorials/guides/scp-ssh-transfer/ The scp and sftp quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real transfer. Upload and download, copy a directory with -r, authenticate with a recovered key, hop through a jump host, pipe over ssh when scp is missing, and verify with a checksum. https://solvere.app/tutorials/guides/netcat-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfernetcatnetworkinglinuxpost-exploitation https://solvere.app/tutorials/guides/netcat-file-transfer/ The netcat file-transfer quick reference: flags, a modular cheat sheet, and worked breakdowns. Listen and save, connect and send, close cleanly with -N or -q0, stream a directory with tar, encrypt with socat OPENSSL, fall back to bash /dev/tcp when nc is missing, and checksum to catch truncation. https://solvere.app/tutorials/guides/http-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfernetworkinglinuxwindowspost-exploitation https://solvere.app/tutorials/guides/http-file-transfer/ The HTTP file-transfer quick reference: serve a folder from your attacker box in one line, then pull files onto the target with wget, curl, certutil, PowerShell, or curl.exe. Flags, a modular cheat sheet, in-memory execution, upload-back with updog, checksum verification, and beating egress filters by serving on 80 or 443. https://solvere.app/tutorials/guides/file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferpost-exploitationnetworkingwindowslinux https://solvere.app/tutorials/guides/file-transfer/ The file-transfer quick reference: the serve-and-pull vs push-and-receive decision, a modular copy-paste cheat sheet, and a worked breakdown of every method. Serve a folder over HTTP, pull with wget or certutil, host an SMB share, move a file with netcat or socat, copy over scp, paste a base64 blob, and checksum both ends. https://solvere.app/tutorials/guides/base64-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferlinuxwindowspost-exploitation https://solvere.app/tutorials/guides/base64-transfer/ The base64 file-transfer quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Encode a file to one pasteable line, decode it with a heredoc, move files with certutil or PowerShell on Windows, chunk a blob too long to paste, and checksum both ends to prove it arrived intact. https://solvere.app/tutorials/guides/netexec/ Sat, 30 May 2026 00:00:00 +0000 Solvere Labs active-directorysmbenumerationwindowslinux https://solvere.app/tutorials/guides/netexec/ A practical NetExec guide: install it, verify it, enumerate one protocol at a time, validate credentials without locking accounts, read the output honestly, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/socat/ Fri, 29 May 2026 00:00:00 +0000 Solvere Labs networkinglinux https://solvere.app/tutorials/guides/socat/ The socat quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Verbose TCP client, port forward, UNIX-socket-to-TCP bridge, TLS wrap, hex-dump a protocol, upgrade a reverse shell to a full PTY, and a virtual serial pair. https://solvere.app/tutorials/guides/whois/ Thu, 28 May 2026 00:00:00 +0000 Solvere Labs osintrecondnslinux https://solvere.app/tutorials/guides/whois/ The whois quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Look up a domain, find who owns an IP, enumerate a netblock, pull name servers, read registration dates, query a registry directly, and route around a redacted or wrong-server answer with RDAP. https://solvere.app/tutorials/guides/wget/ Sun, 24 May 2026 00:00:00 +0000 Solvere Labs webnetworkinglinux https://solvere.app/tutorials/guides/wget/ The wget quick reference: install and verify, a modular copy-paste cheat sheet, and one command for every real situation. Resume a broken download, mirror a site for offline viewing, pull a list of URLs, reuse a login cookie, POST a form, and rate-limit to stay quiet. https://solvere.app/tutorials/guides/tshark/ Tue, 19 May 2026 00:00:00 +0000 Solvere Labs networkinglinux https://solvere.app/tutorials/guides/tshark/ The TShark quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Read a PCAP, filter by BPF or display syntax, extract clean fields, follow a TCP stream, pull cleartext creds, carve files out of HTTP, and spot a port scan. https://solvere.app/tutorials/guides/enum4linux-ng/ Mon, 18 May 2026 00:00:00 +0000 Solvere Labs smbenumerationwindowslinux https://solvere.app/tutorials/guides/enum4linux-ng/ The enum4linux-ng quick reference: the flags that matter, a modular copy-paste cheat sheet, and a worked breakdown of every real SMB and RPC situation. List shares anonymously, enumerate users and groups, dump the password policy, RID-cycle when direct enum is blocked, add credentials for depth, and export clean JSON or YAML. https://solvere.app/tutorials/guides/sqlmap/ Sat, 09 May 2026 00:00:00 +0000 Solvere Labs websqlisqlmaplinux https://solvere.app/tutorials/guides/sqlmap/ The sqlmap quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Confirm an injectable parameter, feed a saved Burp request, fingerprint the DBMS, walk the dbs/tables/columns ladder, dump only the columns you need, grab password hashes, evade a WAF with tamper scripts, and route through a proxy. https://solvere.app/tutorials/guides/nikto/ Wed, 06 May 2026 00:00:00 +0000 Solvere Labs webreconenumerationlinux https://solvere.app/tutorials/guides/nikto/ The Nikto quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real scan. Scan HTTP and HTTPS, hit odd ports, reach a vhost by Host header, tune out the noise, proxy through Burp, save a machine-readable report, and pull just the findings. https://solvere.app/tutorials/guides/dirsearch/ Mon, 04 May 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/dirsearch/ The dirsearch quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real content-discovery task. Pick a wordlist, append extensions, filter soft-404s by size, recurse into found directories, scan a list of hosts, save JSON, and proxy through Burp. https://solvere.app/tutorials/guides/dig/ Fri, 01 May 2026 00:00:00 +0000 Solvere Labs dnsreconenumerationlinux https://solvere.app/tutorials/guides/dig/ The dig quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Resolve A/AAAA, find MX and NS, read SPF and DMARC TXT, reverse-lookup an IP, query a specific resolver, trace delegation from the root, and test a zone transfer. https://solvere.app/tutorials/guides/john/ Wed, 29 Apr 2026 00:00:00 +0000 Solvere Labs brute-forcelinuxwindows https://solvere.app/tutorials/guides/john/ The John the Ripper quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Identify a hash, convert a ZIP or SSH key with a *2john script, run wordlist and rule attacks, crack NT and sha512crypt, mask a known pattern, fork across CPU cores, and read the pot file honestly. https://solvere.app/tutorials/guides/ldapsearch/ Sun, 26 Apr 2026 00:00:00 +0000 Solvere Labs ldapactive-directoryenumerationwindowslinux https://solvere.app/tutorials/guides/ldapsearch/ The ldapsearch quick reference: the flags, a modular copy-paste cheat sheet, and a worked breakdown of every real task. Find the base DN from the Root DSE, bind anonymously or with credentials, list users and groups, enumerate computers, hunt Kerberoastable accounts, page past a size limit, and query over LDAPS. https://solvere.app/tutorials/guides/metasploit/ Sat, 25 Apr 2026 00:00:00 +0000 Solvere Labs reconlinuxwindows https://solvere.app/tutorials/guides/metasploit/ A practical Metasploit guide: install it, verify it, search modules, set options safely, validate findings with auxiliary checks, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/msfvenom/ Tue, 21 Apr 2026 00:00:00 +0000 Solvere Labs linuxwindows https://solvere.app/tutorials/guides/msfvenom/ A practical msfvenom guide: install it, verify it, pick a payload, set LHOST and LPORT, choose a format, generate controlled lab payloads, pair them with a handler, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/tcpdump/ Sat, 18 Apr 2026 00:00:00 +0000 Solvere Labs networkinglinux https://solvere.app/tutorials/guides/tcpdump/ The tcpdump quick reference: install and verify, the flags you actually use, a modular BPF cheat sheet, and one command per real situation. Isolate one host, watch a single service, catch DNS, filter by direction or protocol, read clear-text payload, save a clean PCAP for Wireshark, and rotate long captures unattended. https://solvere.app/tutorials/guides/dnsenum/ Wed, 08 Apr 2026 00:00:00 +0000 Solvere Labs dnsreconenumerationlinux https://solvere.app/tutorials/guides/dnsenum/ The dnsenum quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Pull records and name servers, test a zone transfer, brute force subdomains, pick a resolver for split-horizon DNS, sweep netranges, grow a wordlist, and export XML for your notes. https://solvere.app/tutorials/guides/feroxbuster/ Sun, 05 Apr 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/feroxbuster/ The feroxbuster quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Run recursive content discovery, cap depth, filter soft-404 noise by size or words, add extensions, scan authenticated with a cookie, follow redirects, proxy through Burp, save JSON, and resume an interrupted scan. https://solvere.app/tutorials/guides/radare2/ Thu, 02 Apr 2026 00:00:00 +0000 Solvere Labs reversingpwnforensicsmisclinux https://solvere.app/tutorials/guides/radare2/ The radare2 quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Load and analyze a binary, list functions, strings, and imports, disassemble main, read control flow in graph mode, patch a jump, debug under breakpoints, diff two builds, and script it with r2pipe. https://solvere.app/tutorials/guides/pwntools/ Thu, 02 Apr 2026 00:00:00 +0000 Solvere Labs pwnreversingbuffer-overflowpythonlinuxmisc https://solvere.app/tutorials/guides/pwntools/ A practical pwntools guide: install it, wire up process and remote I/O, pack and unpack values, build ROP helpers, read the output honestly, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/powerview/ Thu, 02 Apr 2026 00:00:00 +0000 Solvere Labs windowsactive-directoryenumerationpowershellreconldap https://solvere.app/tutorials/guides/powerview/ A practical PowerView guide for authorized AD labs: load the module, enumerate users, groups, ACLs, and trusts from a domain-joined host, read the output, and understand the defenses that watch it. https://solvere.app/tutorials/guides/gdb/ Thu, 02 Apr 2026 00:00:00 +0000 Solvere Labs reversingpwnlinuxbuffer-overflowcenumeration https://solvere.app/tutorials/guides/gdb/ The GDB quick reference with GEF and pwndbg: launch flags, a modular cheat sheet, and a worked breakdown of every real situation. Break on a stripped binary, step by instruction, read args in registers, dump the stack, watch a variable, measure an overflow offset with cyclic, inspect the heap, and debug a core dump post-mortem. https://solvere.app/tutorials/guides/winpeas/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs windowsprivilege-escalationenumerationpost-exploitation https://solvere.app/tutorials/guides/winpeas/ A practical WinPEAS guide: get the Windows privilege-escalation enumerator onto a target, read its color-coded output, focus on the high-signal findings, and avoid drowning in noise. https://solvere.app/tutorials/guides/wfuzz/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs webreconenumerationbrute-forcelinuxpython https://solvere.app/tutorials/guides/wfuzz/ The Wfuzz quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Fuzz paths, query and POST parameters, headers, cookies, and virtual hosts, filter custom-404 noise by size, brute a login with two markers, encode payloads on the fly, and proxy through Burp. https://solvere.app/tutorials/guides/stegseek/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs steganographyforensicspassword-crackingbrute-forcesteghide https://solvere.app/tutorials/guides/stegseek/ The Stegseek quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Brute-force a Steghide passphrase against rockyou, extract the hidden payload, confirm a carrier with seed mode, batch many files, and identify what you recovered before opening it. https://solvere.app/tutorials/guides/smbmap/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs smbwindowsactive-directoryenumerationrecon https://solvere.app/tutorials/guides/smbmap/ The smbmap quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. List shares over a null session, read the READ/WRITE flags honestly, recurse a share, pull and push files, pass the hash, and run an authorized remote command. https://solvere.app/tutorials/guides/rustscan/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs networkingreconenumerationrustscannmaplinux https://solvere.app/tutorials/guides/rustscan/ The RustScan quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Sweep all 65535 TCP ports in seconds, hand the open ones to Nmap for versions and scripts, scan a subnet or a file of hosts, fix too many open files, tune speed on a laggy link, and pull a greppable port list. https://solvere.app/tutorials/guides/pspy/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs linuxprivilege-escalationenumerationcronpost-exploitation https://solvere.app/tutorials/guides/pspy/ The pspy quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Transfer the static binary, watch processes and cron fire in real time without root, catch a UID=0 root timer, save and grep the feed for root commands, and turn a writable cron script into a privilege-escalation lead. https://solvere.app/tutorials/guides/powerup/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs windowsprivilege-escalationenumerationpowershellpost-exploitationunquoted-service-path https://solvere.app/tutorials/guides/powerup/ A practical PowerUp guide: run the PowerSploit Windows privesc auditor, read its check output honestly, focus on the high-signal service and path findings, and keep it lab-safe. https://solvere.app/tutorials/guides/linpeas/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs linuxprivilege-escalationenumerationlinpeaspost-exploitationsudosuid https://solvere.app/tutorials/guides/linpeas/ The LinPEAS quick reference: the flags that matter, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Deliver the script to a target, run and save a clean no-color report, tune the depth (stealth, all-checks, extra, regex), scope checks by group or MITRE technique, grep the high-signal findings, and read the color legend honestly. https://solvere.app/tutorials/guides/linenum/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs linuxprivilege-escalationenumerationbashsuidsudo https://solvere.app/tutorials/guides/linenum/ The LinEnum quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Deliver the script to a foothold, run default vs thorough, hunt keywords, export files, write a report, and read the sudo, SUID/SGID, cron, and creds sections that matter. https://solvere.app/tutorials/guides/hash-identifier/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs cryptopassword-crackinghash-crackingreconlinux https://solvere.app/tutorials/guides/hash-identifier/ The hash-identifier quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Turn an unknown hash into the right hashcat -m mode or john --format, triage a mixed dump, read prefixes like $6$ and $2y$, break the MD5-vs-NTLM tie, and hand the type straight to a cracker. https://solvere.app/tutorials/guides/exiftool/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs forensicsosintsteganographyreconmisc https://solvere.app/tutorials/guides/exiftool/ The exiftool quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Dump every tag, pull GPS as decimal, surface hidden CTF fields, extract the embedded thumbnail, strip metadata before publishing, shift wrong timestamps, and batch a folder to CSV. https://solvere.app/tutorials/guides/chisel/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs networkinglateral-movementchisellinuxwindowsssh https://solvere.app/tutorials/guides/chisel/ A practical Chisel guide: tunnel TCP and UDP over HTTP, build a reverse SOCKS pivot from a foothold, reach internal hosts, and keep the noise low in a lab. https://solvere.app/tutorials/guides/cewl/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs webreconpassword-crackingbrute-forceenumerationwordpress https://solvere.app/tutorials/guides/cewl/ The CeWL quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Crawl an authorized site, build a wordlist from its own words, tune depth and length, harvest emails and document authors, rank by frequency, then feed hydra, john, and hashcat. https://solvere.app/tutorials/guides/bloodhound/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs active-directorybloodhoundenumerationlateral-movementkerberoswindowsldap https://solvere.app/tutorials/guides/bloodhound/ A practical BloodHound guide: collect Active Directory graph data, ingest it, hunt attack paths to Domain Admin, and read the output without chasing dead ends. https://solvere.app/tutorials/guides/binwalk/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs forensicsreversingbinwalkmisclinux https://solvere.app/tutorials/guides/binwalk/ The Binwalk quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Map firmware with a signature scan, extract nested layers recursively, carve a byte range with dd, read entropy for compression vs encryption, filter to just the filesystem, and identify a raw blob's CPU architecture. https://solvere.app/tutorials/guides/steghide/ Thu, 26 Mar 2026 00:00:00 +0000 Solvere Labs steganographyforensicssteghidepassword-cracking https://solvere.app/tutorials/guides/steghide/ The Steghide quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Inspect a carrier for a payload, try the empty passphrase, extract with a known one, crack an unknown passphrase with stegseek, embed your own data, and pick the right tool when the format is not JPEG or WAV. https://solvere.app/tutorials/guides/searchsploit/ Thu, 26 Mar 2026 00:00:00 +0000 Solvere Labs linux https://solvere.app/tutorials/guides/searchsploit/ The SearchSploit quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Search by product and version, match a CVE, pin a strict version, filter DoS noise, read code in the pager, mirror an exploit, output JSON, and triage straight from an Nmap scan. https://solvere.app/tutorials/guides/mimikatz/ Tue, 24 Mar 2026 00:00:00 +0000 Solvere Labs windowsactive-directorymimikatzpass-the-hashdcsyncpost-exploitation https://solvere.app/tutorials/guides/mimikatz/ A practical Mimikatz guide for authorized AD labs: what it extracts, the core modules, how to read the output, and the defenses that stop it. https://solvere.app/tutorials/guides/evil-winrm/ Fri, 20 Mar 2026 00:00:00 +0000 Solvere Labs windowsactive-directorywinrmevil-winrmpost-exploitationlateral-movement https://solvere.app/tutorials/guides/evil-winrm/ A practical Evil-WinRM guide: get an interactive WinRM shell on Windows with a password, hash, or certificate, move files, load scripts, and stay inside scope. https://solvere.app/tutorials/guides/nmap/ Wed, 18 Mar 2026 00:00:00 +0000 Solvere Labs networkingreconenumerationnmaplinuxwindows https://solvere.app/tutorials/guides/nmap/ The Nmap quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Ping-sweep a subnet, scan all 65535 ports, fingerprint service versions, run safe NSE scripts, scan UDP, get past a blocked ping, and save output for your notes. https://solvere.app/tutorials/guides/hashcat/ Thu, 12 Mar 2026 00:00:00 +0000 Solvere Labs brute-forcelinuxwindows https://solvere.app/tutorials/guides/hashcat/ The Hashcat quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Pick the exact hash mode, run dictionary, rule, mask, and hybrid attacks, crack NTLM, sha512crypt, WPA, and Kerberoast hashes, read the status screen, and resume long jobs. https://solvere.app/tutorials/guides/dnsrecon/ Wed, 11 Mar 2026 00:00:00 +0000 Solvere Labs dnsreconenumerationlinux https://solvere.app/tutorials/guides/dnsrecon/ The DNSRecon quick reference: modes, flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Pull standard records, test a zone transfer, brute force subdomains, reverse an IP range, walk a DNSSEC zone, pin a resolver, and save CSV/JSON you can diff.