Ethical Hacking and Penetration Testing
Intensive offensive security workshop delivered by BugXploit at Koteshwor, Kathmandu. Documenting real-time methodology, reconnaissance workflows, exploitation techniques, and defense counter-measures.
Workshop Session
Select any sessions below to read in-depth reports, command cheat-sheets, and lab findings.
Day 1: Lab Setup, VirtualBox & Nmap Intro
Downloading & configuring Metasploitable 2 and Kali Linux 2026.2 in VirtualBox, network adapter configuration, IP discovery via ifconfig, ping verification, and Nmap introduction.
Day 2: Service Enumeration, VSFTPD (CVE-2011-2523) & SSH Brute-Force
Port versioning with nmap -sV, browser web enumeration, triggering vsftpd 2.3.4 backdoor (CVE-2011-2523) to gain root shell on port 6200, Metasploit ssh_login brute-force, and legacy RSA SSH login.