Practitioner-level cybersecurity tutorials — CTF technique, recon tooling, and the fundamentals — for people who want to understand how the attack actually works.
This is the evergreen side of Forgebound Research: written guides and tool breakdowns that sit alongside the Exploit Brokers podcast and the Golang security tooling series.
CTF & Exploitation
OPSEC for Red Teamers and CTF Players: A Practical Field Guide
The operational security mistakes that get red teamers and CTF players caught, and how to avoid them.
Reverse Shell Cheat Sheet for Linux CTF — One-Liners and TTY Upgrade
Working reverse shell one-liners for Linux targets, plus the TTY upgrade steps that make them usable.
Linux SUID Privilege Escalation Tutorial for CTF
Finding and exploiting SUID binaries for privilege escalation on CTF boxes.
Recon & Enumeration Tools
theHarvester OSINT Tutorial: Passive Recon from the Command Line
Passive reconnaissance with theHarvester — emails, subdomains, and hosts without touching the target.
ffuf Tutorial: Web Fuzzing for Directories, Virtual Hosts, and Parameters
Directory, vhost, and parameter fuzzing with ffuf, from basic wordlist runs to filtered output.
gobuster vs ffuf — Which Web Enumeration Tool for Which Job
Where each tool wins, and when reaching for the other one saves time.
masscan vs nmap: When to Use Each (and How to Combine Them)
Speed vs. depth — and a workflow that uses masscan to find hosts and nmap to characterize them.
Network Scanning with MASSCAN
Getting started with masscan for fast, large-scale port scanning.
Getting Started
What is Ethical Hacking? How to Be an Ethical Hacker?
The fundamentals of ethical hacking as a discipline and a career path.
Ethical Hacking using Python – Quick Intro
A quick-start intro to using Python for security tooling and scripting.
Linux How To Guide for Files and Directories
Core Linux file and directory commands every practitioner needs before anything else makes sense.
From the Podcast
These same tools and techniques show up in Exploit Brokers episodes — hacking news breakdowns and technical deep dives that put them in real-world context.