An image of the module from Hack the Box, embedded in the picture, serves as a link to my completed module.

Web Application Pentesting (Hack The Box) — Module Overview

This Hack The Box module is a compact, hands on introduction to web application pentesting built for students who already know basic Linux and core security concepts. It walks you from the building blocks of web apps to real world attack techniques, and includes interactive labs where you can reproduce commands and practice exploit chains safely.

An image of the module from Hack the Box, embedded in the picture, serves as a link to my completed module.

Introduction to Hardware Hacking: Why It Matters

Hardware hacking is about understanding the vulnerabilities that exist beneath the software layer in the chips, circuits, and wireless connections that power our devices.

Penetration Testing in a Nutshell: Understanding the Full Process

Penetration testing simulates real world attacks to find the weak spots before an adversary does. This module walks you through a realistic pentest workflow from pre engagement and information gathering on Linux/Windows, to vulnerability assessment, gaining initial access, privilege escalation, data discovery/exfiltration, and finally Proof of Concept creation and reporting. Each section includes hands on exercises and example commands so you can practice the exact steps you will perform in the field.

The module breaks down the process into eight key phases:

• Pre-Engagement – Define scope, permissions, and objectives.
• Information Gathering – Collect intelligence on systems and networks.
• Vulnerability Assessment – Identify weak points from collected data.
• Exploitation – Attempt to gain unauthorized access.
• Post-Exploitation – Escalate privileges and analyze deeper access.
• Lateral Movement – Expand control across the network.
• Proof-of-Concept – Document how vulnerabilities were exploited.
• Post-Engagement – Present findings and remediation steps to the client.

An image of the module from Hack the Box, embedded in the picture, serves as a link to my completed module.

At its core, penetration testing is an authorized simulation of a cyberattack designed to uncover vulnerabilities before real attackers can exploit them. For cybersecurity students, learning this process is essential. It builds a deep understanding of how attacks unfold, how defenses fail, and how to communicate technical findings clearly and professionally. Beyond technical skill, it develops critical thinking helping you diagnose problems, adapt when you’re stuck, and follow a structured methodology. It’s not just about hacking it’s about learning how to think, analyze, and defend like a true cybersecurity professional.

The photo from the lab on Hack the Box includes a link to my completed lab.

Tracking Sandworm: Using MITRE ATT&CK to Study Real Threats

As a cybersecurity student I have been curious about industrial control systems (ICS), in this lab I researched the advanced threat group Sandworm also known as BlackEnergy Group or APT44. This Russian state-sponsored team is behind major attacks like NotPetya and Ukraine’s power grid disruptions.

Using the MITRE ATT&CK framework, I mapped Sandworm’s tactics and techniques from spearphishing and PowerShell execution to data destruction and Industrial Control Systems disruption. The framework clearly shows how real attackers operate across every stage of an attack.