nPm Hacks – nPm

Offsec Proving Grounds Walkthrough – Fish

By nPm August 14, 2026Ethical Hacking, Hacking, msfvenom, Offsec, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Fish" in the OffSec Proving Grounds...this is a Windows machine rated as intermediate. In this video we utilize a directory traversal exploit for Glassfish Server to obtain clear text credentials for SynaMan and then RDP into the machine for a foothold. After spending a ton…

Offsec Proving Grounds Walkthrough – Peppo

By nPm August 8, 2026Docker, Ethical Hacking, Hacking, Linux, Networking, Offsec, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Peppo" in the OffSec Proving Grounds...this is a Linux machine rated as hard. In this video we brute force SSH to get a foothold, then have to break out of a restricted bash environment to be able to actually run some useful commands (after also…

Offsec Proving Grounds Walkthrough – MZEEAV

By nPm July 12, 2026Ethical Hacking, Hacking, Linux, Networking, Python, Security, Tutorial, Walkthrough

Walkthrough of the machine called "MZEEAV" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of MZEEAV to gain an initial foothold after some thorough enumeration and then escalate privileges using some detective work to take advantage of a binary with…

Offsec Proving Grounds Walkthrough – Fail

By nPm June 16, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Fail" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of rsync to drop an ssh key on the machine, then we privesc abusing the fail2ban service config files initiating a reverse shell! https://youtu.be/Ft_Hlfr3Zb0

Offsec Proving Grounds Walkthrough – Walla

By nPm June 5, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Raspberry Pi, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Walla" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of RaspAP using default credentials, then we privesc using python library hijacking! I thought this was an easy one! https://youtu.be/moCaxsptbhA

Offsec Proving Grounds Walkthrough – Apex

By nPm May 26, 2026Ethical Hacking, Hacking, Linux, Offsec, Python, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Apex" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of SMB, OpenEMR, and Responsive File Manager to gain access to the machine using some specially crafted curl statements. We privesc using password reuse to gain…

TryHackMe Walkthrough – Watcher

By nPm May 12, 2026Ethical Hacking, Hacking, Linux, Security, TryHackMe, Tutorial, Walkthrough

Watcher is a TryHackMe boot2root Linux machine that I thought was pretty fun. We use various techniques to first gain a foothold on the box and then move laterally across several users of the system (gaining a little more "power" each time) until we are finally able to privesc using…

Offsec Proving Grounds Walkthrough – Spider Society

By nPm May 5, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Security, Systemd, Tutorial, Walkthrough

Walkthrough of the machine called "SpiderSociety" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we use gobuster to find a hidden directory which provides access to a login page configured default credentials, then we use some FTP credentials we discover to find a…

Offsec Proving Grounds Walkthrough – Spaghetti

By nPm April 27, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Spaghetti" in the Offsec Proving Grounds...this is a Linux machine rated as Intermediate (it was hard, LOL). In this video we exploit an IRC bot to get a reverse shell and then explore the machine and determine that we can privesc using database injection after…

Offsec Proving Grounds Walkthrough – Escape

By nPm April 21, 2026Ethical Hacking, Hacking, Linux, Offsec, Security, Tutorial, Uncategorized, Walkthrough

Walkthrough of the machine called "Escape" in the OffSec Proving Grounds...this is a Linux machine rated as hard. In this video we exploit a website using Burp Suite to upload a PHP reverse shell masquerading as a .gif. Once on the machine we determine the we can escape the Docker…