nPm Hacks – nPm

Offsec Proving Grounds Walkthrough – Mice

By nPm September 18, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Virtual Machines, Walkthrough

Walkthrough of the machine called "Mice" in the OffSec Proving Grounds...this is a Windows machine rated as Easy. In this video we take advantage of an exploitable version of remote mouse in multiple ways, once to get a foothold and again to get system administrator access once connected via xrdp.…

Offsec Proving Grounds Walkthrough – Pelican

By nPm September 6, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Pelican" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of an exploitable program called Exhibitor for Zookeeper to gain a foothold. I then show you how to use an incorrectly set "sudo no password" on…

Offsec Proving Grounds Walkthrough – Internal

By nPm August 23, 2026Ethical Hacking, Hacking, Linux, Metasploit, msfvenom, Networking, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Internal" in the OffSec Proving Grounds...this is a Windows machine rated as easy. In this video we enumerate SMB to determine using an nmap script that the device is vulnerable to an exploit. I then show you how to modify the exploit we find in…

Offsec Proving Grounds Walkthrough – Fish

By nPm August 14, 2026Ethical Hacking, Hacking, msfvenom, Offsec, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Fish" in the OffSec Proving Grounds...this is a Windows machine rated as intermediate. In this video we utilize a directory traversal exploit for Glassfish Server to obtain clear text credentials for SynaMan and then RDP into the machine for a foothold. After spending a ton…

Offsec Proving Grounds Walkthrough – Peppo

By nPm August 8, 2026Docker, Ethical Hacking, Hacking, Linux, Networking, Offsec, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Peppo" in the OffSec Proving Grounds...this is a Linux machine rated as hard. In this video we brute force SSH to get a foothold, then have to break out of a restricted bash environment to be able to actually run some useful commands (after also…

Offsec Proving Grounds Walkthrough – MZEEAV

By nPm July 12, 2026Ethical Hacking, Hacking, Linux, Networking, Python, Security, Tutorial, Walkthrough

Walkthrough of the machine called "MZEEAV" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of MZEEAV to gain an initial foothold after some thorough enumeration and then escalate privileges using some detective work to take advantage of a binary with…

Offsec Proving Grounds Walkthrough – Fail

By nPm June 16, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Fail" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of rsync to drop an ssh key on the machine, then we privesc abusing the fail2ban service config files initiating a reverse shell! https://youtu.be/Ft_Hlfr3Zb0

Offsec Proving Grounds Walkthrough – Walla

By nPm June 5, 2026Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Raspberry Pi, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Walla" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of RaspAP using default credentials, then we privesc using python library hijacking! I thought this was an easy one! https://youtu.be/moCaxsptbhA

Offsec Proving Grounds Walkthrough – Apex

By nPm May 26, 2026Ethical Hacking, Hacking, Linux, Offsec, Python, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Apex" in the OffSec Proving Grounds...this is a Linux machine rated as Intermediate. In this video we take advantage of SMB, OpenEMR, and Responsive File Manager to gain access to the machine using some specially crafted curl statements. We privesc using password reuse to gain…

TryHackMe Walkthrough – Watcher

By nPm May 12, 2026Ethical Hacking, Hacking, Linux, Security, TryHackMe, Tutorial, Walkthrough

Watcher is a TryHackMe boot2root Linux machine that I thought was pretty fun. We use various techniques to first gain a foothold on the box and then move laterally across several users of the system (gaining a little more "power" each time) until we are finally able to privesc using…