Teaching myself penetration testing

I’m teaching myself to crack into my own server. I’ve been looking for vulnerabilities. I’ve already patched a few clean. I wonder what new fun unexplored holes were opened by the patches. Probably not anything useful.

I’d love if anyone has any advice for pentesting, ex where to find resources on how to do it effectively, I’d love to hear it.

For now I’ve been playing around with some of the tools that come with Kali. So far I’ve found some folders that needed to be secured better in some containers, and I found that wordpress had the wp-content folder totally open. Why the absolute fuck that isn’t locked down by default is beyond me. 744? Are you fucking kidding me?

Nepenthes seems to be doing it’s job on the other services.

Has anyone rolled out and PoW verification on their home-servers? Would it be worth it to run something like Anubis on my home server? I should check that out.

Anyways. This is a deep rabbit hole. I’m probably gonna get obsessed with cracking for a bit.

For any feds who happen to read my stream of bullshit consciousness: I’m not breaking into anyone’s shit but my own. I have permission to do this. It’s my fuckin hardware. It’s my fuckin software. I’ll crack it if I want to.

L8r h8rs,
Nora