<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>4ntar3s</title><link>https://4ntar3s.com/</link><description>Recent content on 4ntar3s</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 14 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://4ntar3s.com/index.xml" rel="self" type="application/rss+xml"/><item><title>Chapter 01 — Thinking About Thinking</title><link>https://4ntar3s.com/books/psychology-of-intelligence-analysis/chapter-01/</link><pubDate>Tue, 14 Jul 2026 00:00:00 +0000</pubDate><guid>https://4ntar3s.com/books/psychology-of-intelligence-analysis/chapter-01/</guid><description>&lt;blockquote>
&lt;p>&lt;strong>Note:&lt;/strong> These are my study notes for Chapter 1 of &lt;em>Psychology of Intelligence Analysis&lt;/em> by Richards J. Heuer, Jr. (Center for the Study of Intelligence, CIA, 1999). Everything below is written in my own words, with my own examples. It is a summary and commentary, not a copy of the book. The original is available free from the &lt;a href="https://www.cia.gov/resources/csi/books-monographs/psychology-of-intelligence-analysis-2/">CIA&amp;rsquo;s website&lt;/a>.&lt;/p>
&lt;/blockquote>
&lt;h2 id="the-big-idea-of-the-whole-book">The big idea of the whole book&lt;/h2>
&lt;p>When an intelligence agency misses something big, the first question people ask is: &amp;ldquo;Why didn&amp;rsquo;t we have the information?&amp;rdquo;&lt;/p></description></item><item><title>Metasploitable 2 — Rooting the Box Two Ways</title><link>https://4ntar3s.com/metasploitable-2-rooting-the-box-two-ways/</link><pubDate>Tue, 30 Jun 2026 00:00:00 +0000</pubDate><guid>https://4ntar3s.com/metasploitable-2-rooting-the-box-two-ways/</guid><description>&lt;blockquote>
&lt;p>First dispatch from the dark. This is box #1 of a 24-box road to OSCP, documented start to finish — the wins &lt;em>and&lt;/em> the errors, because the errors are where the learning lives.&lt;/p>
&lt;/blockquote>
&lt;h2 id="what-is-metasploitable-2">What is Metasploitable 2?&lt;/h2>
&lt;p>Metasploitable 2 is a Linux machine that was &lt;strong>built on purpose to be broken into&lt;/strong>. Think of it as a house with dozens of rusty, broken locks — a safe place to practice picking them without breaking any laws. It&amp;rsquo;s the classic first target for anyone learning offensive security, because it lets you run the full workflow end to end: find the target, map its weak points, break in, and prove you own it.&lt;/p></description></item><item><title>Redeemer — Starting Point Tier 0</title><link>https://4ntar3s.com/redeemer-starting-point-tier-0/</link><pubDate>Sun, 21 Jun 2026 10:00:00 -0400</pubDate><guid>https://4ntar3s.com/redeemer-starting-point-tier-0/</guid><description>&lt;p>First box on the 4ntar3s log. Redeemer is a Tier 0 Starting Point machine — no exploitation chain, no privesc, just a single misconfigured service. The lesson here isn&amp;rsquo;t the hack, it&amp;rsquo;s the habit: enumerate fully before you touch anything.&lt;/p>
&lt;h2 id="recon">Recon&lt;/h2>
&lt;p>Two-stage nmap. Fast full-port sweep first, then deep service detection on what comes back.&lt;/p>
&lt;div class="highlight">&lt;div class="chroma">
&lt;table class="lntable">&lt;tr>&lt;td class="lntd">
&lt;pre tabindex="0" class="chroma">&lt;code>&lt;span class="lnt">1
&lt;/span>&lt;/code>&lt;/pre>&lt;/td>
&lt;td class="lntd">
&lt;pre tabindex="0" class="chroma">&lt;code class="language-bash" data-lang="bash">&lt;span class="line">&lt;span class="cl">nmap -p- --min-rate &lt;span class="m">5000&lt;/span> -oN sweep.txt 10.129.x.x
&lt;/span>&lt;/span>&lt;/code>&lt;/pre>&lt;/td>&lt;/tr>&lt;/table>
&lt;/div>
&lt;/div>&lt;p>A single port answers:&lt;/p>
&lt;div class="highlight">&lt;div class="chroma">
&lt;table class="lntable">&lt;tr>&lt;td class="lntd">
&lt;pre tabindex="0" class="chroma">&lt;code>&lt;span class="lnt">1
&lt;/span>&lt;span class="lnt">2
&lt;/span>&lt;/code>&lt;/pre>&lt;/td>
&lt;td class="lntd">
&lt;pre tabindex="0" class="chroma">&lt;code class="language-text" data-lang="text">&lt;span class="line">&lt;span class="cl">PORT STATE SERVICE
&lt;/span>&lt;/span>&lt;span class="line">&lt;span class="cl">6379/tcp open redis
&lt;/span>&lt;/span>&lt;/code>&lt;/pre>&lt;/td>&lt;/tr>&lt;/table>
&lt;/div>
&lt;/div>&lt;p>Then version detection on that one port:&lt;/p></description></item></channel></rss>