Networks/Networking

IP discovery is a core recon technique. Here are all the methods, from passive OSINT to active network attacks. This article/guide is on how to find someone's IP Address.

Let me be direct: running a game server hosting business off a NAS is like trying to run a food truck out of a dorm room mini-fridge. It can work for very specific, lightweight scenarios, but there are hard technical and business limitations you need to understand before sinking time or money into this. This is a guide on renting game servers from NAS Servers.

A NAS is not the ideal platform for renting game servers commercially. While some powerful NAS devices can run containers or virtual machines, they are generally designed for storage, not for hosting multiple game servers with paying customers. This is a guide on renting out video game servers using NAS servers.

Here's how to set up a NAS server, framed for pentest operations — whether it's for exfiltration staging, payload hosting, or as a target for security assessment. This is a guide on how to set up a NAS server for hacking.

Here's the complete guide to building your own VPN for pentesting — from quick WireGuard tunnels to full multi-hop infrastructure. This is a guide on how to build your own VPN for hacking.

Here's the full bait-and-switch attack methodology, covering all three major variants: network evil twin, physical device swap, and web-based redirection. This is a guide on how to perform a "Bait and Switch" attack.

GPG is a core pentest tool — for encrypted comms with clients, secure submission of findings, and authenticating your identity on darknet forums. Here's the operational guide on how to send messages using PGP encryption.

Aerial wardriving gives you a 3D signal propagation map that ground surveys can't produce. WiFi signals bleed upward through windows, roof vents, and atriums. Rooftop APs and point-to-point bridges are invisible from the parking lot but wide open from 100 meters up. This is advanced physical-layer recon and it's incredibly effective when authorized. This is a guide on how to aerial warflying / wardriving works.

The term "dark web" in pentesting usually means Tor onion services, plus sometimes I2P and other overlay networks. This is how to actually find and navigate .onion services safely during an engagement. This is a guide on how to access the dark web.

Parking barriers and gate remotes are one of the most reliable Sub-GHz wins in physical pentesting. Most systems are fixed-code or use weak rolling codes, and the Flipper handles them cleanly. Here's a guide on hacking parking barriers & gates with the Flipper Zero.

Here's a guide on how to get managed into monitor mode across different network cards and operating systems.

Rogue APs are the most reliable wireless attack vector in corporate pentesting. Clients trust what they know, and they'll connect to an AP broadcasting the SSID they're looking for. Here's the full operational guide on hacking with rogue access points (APs).

Here's a modular spoofing framework built on Scapy. It handles ARP poisoning, DNS spoofing, MAC spoofing, and DHCP rogue server — all from one script. This is a guide on creating a custom spoofing script.

Comprehensive WiFi security assessment methodology. This is a detailed guide on how to hack WiFi networks.