Level 4 — Professional
-
Step 304. Understanding the OSCP Exam and a Preparation Roadmap — The Rules of the 24-Hour Practical Battlefield
Step 304. Understanding the OSCP Exam and a Preparation Roadmap — The Rules of the 24-Hour Practical Battlefield Level 4 — Professional | Difficulty ★★☆☆☆ | Estimated time: 3–4 hours Prerequisites: you…
-
Step 305. Taking Down Practice Machines Begins — One Report per Machine
Step 305. Taking Down Practice Machines Begins — One Report per Machine Level 4 — Expert | Difficulty ★★★☆☆ | Estimated time: 1–2 days (4-hour timebox × 2 machines) Prerequisites: you completed…
-
Step 306. The Thoroughness of Enumeration — The Reality of “Try Harder”
Step 306. The Thoroughness of Enumeration — The Reality of "Try Harder" Level 4 — Expert | Difficulty ★★★☆☆ | Estimated time: 1–2 days Prerequisites: you finished 2 practice machines and the…
-
Step 307. ★ Project — Finalizing the Exam-Format Report Template
Step 307. ★ Project — Finalizing the Exam-Format Report Template Level 4 — Expert | Difficulty ★★★☆☆ | Estimated time: 1 day Prerequisites: you finished Step 128 (the MS2 report) and Steps…
-
Step 308. AD Set Takedown Training — From the Client to the Domain Controller
Step 308. AD Set Takedown Training — From the Client to the Domain Controller Level 4 — Expert | Difficulty ★★★★☆ | Estimated time: 2–3 days Prerequisites: you finished Step 261 (AD…
-
Step 309. ★ The First 24-Hour Mock Exam — A Day of Learning to Fight the Clock
Step 309. ★ The First 24-Hour Mock Exam — A Day of Learning to Fight the Clock Level 4 — OSCP Preparation & Sitting the Exam | Difficulty ★★★★★ | Estimated time:…
-
Step 310. Mock Exam Failure-Pattern Analysis & Remediation — Unsolved Machines Come in Three Kinds
Step 310. Mock Exam Failure-Pattern Analysis & Remediation — Unsolved Machines Come in Three Kinds Level 4 — OSCP Preparation & Sitting the Exam | Difficulty ★★★☆☆ | Estimated time: 2 days…
-
Step 311. ★ The Second 24-Hour Mock Exam — Verification Day, Measuring Whether the Remediation Worked
Step 311. ★ The Second 24-Hour Mock Exam — Verification Day, Measuring Whether the Remediation Worked Level 4 — OSCP Preparation & Sitting the Exam | Difficulty ★★★★★ | Estimated time: 3…
-
Step 312. ★ Sitting the OSCP Practical Exam — 24 Hours of Doing Only What You Practiced
Step 312. ★ Sitting the OSCP Practical Exam — 24 Hours of Doing Only What You Practiced Level 4 — OSCP Preparation & Sitting the Exam | Difficulty ★★★★★ | Estimated time:…
-
Step 313. OSCP Retrospective & Next Plan — What to Do Before the Results Come Out
Step 313. OSCP Retrospective & Next Plan — What to Do Before the Results Come Out Level 4 — OSCP Preparation & Exam | Difficulty ★★★☆☆ | Estimated time: 1–2 days (half…
-
Step 314. Starting Bug Bounty — Understanding the System and Picking Your First Target
Step 314. Starting Bug Bounty — Understanding the System and Picking Your First Target Level 4 — Bug Bounty | Difficulty ★★☆☆☆ | Estimated time: 2 hours Prerequisites: you have finished Step…
-
Step 315. Real-Service Recon — Attack Surface Mapping
Step 315. Real-Service Recon — Attack Surface Mapping Level 4 — Bug Bounty | Difficulty ★★★☆☆ | Estimated time: 3 hours Prerequisites: you have finished Step 171 (subdomain enumeration) and Step 314…
-
Step 316. Vulnerability Discovery — A Systematic Feature-by-Feature Approach
Step 316. Vulnerability Discovery — A Systematic Feature-by-Feature Approach Level 4 — Bug Bounty | Difficulty ★★★★☆ | Estimated time: 3 hours 30 minutes Prerequisites: you have finished Step 315 (attack surface…
-
Step 317. Verifying Candidates and Confirming Impact
Step 317. Verifying Candidates and Confirming Impact Level 4 — Bug Bounty | Difficulty ★★★★☆ | Estimated time: 3 hours Prerequisites: you have finished Step 316 (feature-by-feature discovery). You have candidate_list.md in…
-
Step 318. Writing a Report That Gets Accepted
Step 318. Writing a Report That Gets Accepted Level 4 — Bug Bounty | Difficulty ★★★☆☆ | Estimated time: 3 hours Prerequisites: you have finished Step 317 (candidate verification). You have 1…
-
Step 319. Submitting Your First Report & Handling Triage — The Real Work Starts After the Button
Step 319. Submitting Your First Report & Handling Triage — The Real Work Starts After the Button Level 4 — Reporting, CVE Analysis & Open-Source Contribution | Difficulty ★★★☆☆ | Estimated time:…
-
Step 320. 1-day Vulnerability Analysis — Reverse-Engineering the Flaw from a Patch diff
Step 320. 1-day Vulnerability Analysis — Reverse-Engineering the Flaw from a Patch diff Level 4 — Reporting, CVE Analysis & Open-Source Contribution | Difficulty ★★★★☆ | Estimated time: 3 hours Prerequisites: Git…
-
Step 321. CVE Reproduction and Publishing the Analysis Report — The Proof of an Analysis Is Reproduction
Step 321. CVE Reproduction and Publishing the Analysis Report — The Proof of an Analysis Is Reproduction Level 4 — Reporting, CVE Analysis & Open-Source Contribution | Difficulty ★★★★☆ | Estimated time:…
-
Step 322. Second CVE: Independent Analysis — Standing Alone Through the Analysis Cycle
Step 322. Second CVE: Independent Analysis — Standing Alone Through the Analysis Cycle Level 4 — Reporting, CVE Analysis & Open-Source Contribution | Difficulty ★★★★☆ | Estimated time: 3 hours Prerequisites: you’ve…
-
Step 323. Publishing an Open-Source Tool and Contributing to the Community — Code as a Work
Step 323. Publishing an Open-Source Tool and Contributing to the Community — Code as a Work Level 4 — Reporting, CVE Analysis & Open-Source Contribution | Difficulty ★★★☆☆ | Estimated time: 3…
-
Step 324. Competing in a Domestic Qualifier — Chasing the Finals: The Total Score Beats the Hero
Step 324. Competing in a Domestic Qualifier — Chasing the Finals: The Total Score Beats the Hero Level 4 — Professional | Difficulty ★★★★☆ | Estimated time: 2 days (half a day…
-
Step 325. Intensive Training for the Finals — Two Weeks of Making What You Know Certain
Step 325. Intensive Training for the Finals — Two Weeks of Making What You Know Certain Level 4 — Professional | Difficulty ★★★★☆ | Estimated time: 2 days (half a day to…
-
Step 326. Competing in the Finals — The Highest-Level Experience: Executing Our Plan Under Pressure
Step 326. Competing in the Finals — The Highest-Level Experience: Executing Our Plan Under Pressure Level 4 — Professional | Difficulty ★★★★☆ | Estimated time: 2 days (gear & condition prep +…
-
Step 327. Gap Analysis Against the Winning Team — Dissecting “Why,” Not “What”
Step 327. Gap Analysis Against the Winning Team — Dissecting "Why," Not "What" Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days (half a day collecting Write-ups + one…
-
Step 328. Competing in an International CTF — The Global Competition Experience: Seeing the World’s Ceiling
Step 328. Competing in an International CTF — The Global Competition Experience: Seeing the World’s Ceiling Level 4 — Professional | Difficulty ★★★★★ | Estimated time: 2+ days (timezone strategy + completing…
-
Step 329. Analyzing World-Class New Techniques — The Write-up Is Your Textbook
Step 329. Analyzing World-Class New Techniques — The Write-up Is Your Textbook Level 4 — Professional | Difficulty ★★★★☆ | Estimated time: 2 days (writing new-technique notes + reproducing 2 core techniques)…
-
Step 330. Building a Routine for Absorbing Cutting-Edge Knowledge — Whoever Subscribes to Good Channels Wins
Step 330. Building a Routine for Absorbing Cutting-Edge Knowledge — Whoever Subscribes to Good Channels Wins Level 4 — Professional | Difficulty ★★☆☆☆ | Estimated time: 2 days + 2 weeks of…
-
Step 331. Starting to Mentor — Learning by Teaching: If You Can’t Explain It, You Don’t Know It
Step 331. Starting to Mentor — Learning by Teaching: If You Can’t Explain It, You Don’t Know It Level 4 — Professional | Difficulty ★★☆☆☆ | Estimated time: 2 days (recruiting a…
-
Step 332. Building Seminar Talk Materials — Designing What the Audience Takes Home
Step 332. Building Seminar Talk Materials — Designing What the Audience Takes Home Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days (half a day of topic selection +…
-
Step 333. Giving a Public Talk and Sharing Materials — Carving Your Name into the Community
Step 333. Giving a Public Talk and Sharing Materials — Carving Your Name into the Community Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days + the talk day…
-
Step 334. Consolidating Your Portfolio — The Proof-of-Skill Package: Scattered Evidence into One Story
Step 334. Consolidating Your Portfolio — The Proof-of-Skill Package: Scattered Evidence into One Story Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days (half a day of asset inventory…
-
Step 335. Fixing Your Career Direction — Choosing Your Path Among Security’s Branches
Step 335. Fixing Your Career Direction — Choosing Your Path Among Security’s Branches Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days (half a day of job-posting research +…
-
Step 336. Challenging for the Domestic Championship — Mustering Total Strength: 24 Hours of Discipline Makes a Champion
Step 336. Challenging for the Domestic Championship — Mustering Total Strength: 24 Hours of Discipline Makes a Champion Level 4 — Professional | Difficulty ★★★★★ | Estimated time: 2+ days (2 weeks…
-
Step 337. Win/Loss Analysis and Designing the Next Challenge — Win or Lose, It’s All Data
Step 337. Win/Loss Analysis and Designing the Next Challenge — Win or Lose, It’s All Data Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days (half a day for…
-
Step 338. Intensive Weakness Training — Completing the Top Tier: Escaping the Trap of Doing More of What You’re Good At
Step 338. Intensive Weakness Training — Completing the Top Tier: Escaping the Trap of Doing More of What You’re Good At Level 4 — Professional | Difficulty ★★★★☆ | Estimated time: 2+…
-
Step 339. The Highest-Level Contest — A Domestic Rematch or an International Final: Skill Gaps Are Small; Operations Decide the Match
Step 339. The Highest-Level Contest — A Domestic Rematch or an International Final: Skill Gaps Are Small; Operations Decide the Match Level 4 — Professional | Difficulty ★★★★★ | Estimated time: 2+…
-
Step 340. A Memoir of the Entire Competition Journey — Assetization: Turning Experience into Story
Step 340. A Memoir of the Entire Competition Journey — Assetization: Turning Experience into Story Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days (half a day gathering material…
-
Step 341. Exploring the Next Growth Axis — Cloud/Mobile/IoT Security: A New Layer to Lay on the Fundamentals You’ve Built
Step 341. Exploring the Next Growth Axis — Cloud/Mobile/IoT Security: A New Layer to Lay on the Fundamentals You’ve Built Level 4 — Professional | Difficulty ★★☆☆☆ | Estimated time: 2 days…
-
Step 342. Launching into a New Field — With the Posture of Level 0 and a Proven Methodology
Step 342. Launching into a New Field — With the Posture of Level 0 and a Proven Methodology Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 2 days (confirming the…
-
Step 343. The Integrated Intrusion Scenario — Operating Your Full Capability: From a List of Techniques to an Operation
Step 343. The Integrated Intrusion Scenario — Operating Your Full Capability: From a List of Techniques to an Operation Level 4 — Professional | Difficulty ★★★★★ | Estimated time: 2 days (half…
-
Step 344. Penetration Playbook v2.0 — The Cycle Where Experience Becomes a Manual
Step 344. Penetration Playbook v2.0 — The Cycle Where Experience Becomes a Manual Level 4 — Professional | Difficulty ★★★★☆ | Estimated time: 4–6 hours (asset collection + critical re-read + revision…
-
Step 345. Establishing a System for Giving Back — Building a Structure That Returns What You Received
Step 345. Establishing a System for Giving Back — Building a Structure That Returns What You Received Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 3–4 hours (contribution accounting +…
-
Step 346. Leading a CTF Team — Becoming the Center of Gravity of a Winning Team
Step 346. Leading a CTF Team — Becoming the Center of Gravity of a Winning Team Level 4 — Professional | Difficulty ★★★★☆ | Estimated time: 3–5 hours (team diagnosis + strategy…
-
Step 347. Competing in the Target Competition — The Curriculum’s Reckoning
Step 347. Competing in the Target Competition — The Curriculum’s Reckoning Level 4 — Professional | Difficulty ★★★★★ | Estimated time: 2–3 weeks (training cycle) + 48 hours (completing the competition) Prerequisites:…
-
Step 348. A Completion Retrospective and the Next Journey — The End Is the Starting Point
Step 348. A Completion Retrospective and the Next Journey — The End Is the Starting Point Level 4 — Professional | Difficulty ★★★☆☆ | Estimated time: 1–2 days (organizing metrics + publishing…