root@sparrow:~$ cd ~/roadmaps && ls -la
roadmaps
Study paths mapped to real HackTheBox machines — each entry links straight to my write-up when it's published, and to the official HTB machine page.
Certifications
OffSecOSCPThe classic — enumeration, exploitation, and privilege escalation across Linux & Windows boxes.user access view roadmap →
OffSecOSEPEvasion and advanced Active Directory attack paths for the PEN-300 track.user access view roadmap →
OffSecOSWEWhite-box web application exploitation and source-code auditing.user access view roadmap →
HTBCPTSHackTheBox's own penetration testing certification — broad, practical coverage.user access view roadmap →
INE SecurityeCPPTPractical pentesting fundamentals across network, web and privilege escalation.user access view roadmap →
INE SecurityeJPTEntry-level junior penetration tester path — the place to start.user access view roadmap →
By skill
Active DirectoryDomain enumeration, lateral movement, Kerberos abuse and full domain compromise.user access view roadmap →
Linux PrivescFrom low-privilege shell to root — the recurring techniques and misconfigurations.user access view roadmap →
Windows PrivescLocal privilege escalation on Windows hosts, outside of a domain context.user access view roadmap →
Web ExploitationWeb application vulnerabilities as an initial-access vector into a box.user access view roadmap →
Starting from ZeroNever touched HTB before? This is the on-ramp — easy, well-known boxes first.user access view roadmap →
root@sparrow:~$ cd ~/roadmaps && ls -la
roadmaps
Rutas de estudio mapeadas a máquinas reales de HackTheBox — cada entrada enlaza directo a mi writeup en cuanto se publica, y a la página oficial de la máquina en HTB.
Certificaciones
OffSecOSCPLa clásica — enumeración, explotación y escalada de privilegios en máquinas Linux y Windows.user access ver roadmap →
OffSecOSEPEvasión y rutas de ataque avanzadas en Active Directory, para el temario de PEN-300.user access ver roadmap →
OffSecOSWEExplotación web en caja blanca y auditoría de código fuente.user access ver roadmap →
HTBCPTSLa certificación propia de HackTheBox — cobertura amplia y práctica.user access ver roadmap →
INE SecurityeCPPTFundamentos prácticos de pentesting en red, web y escalada de privilegios.user access ver roadmap →
INE SecurityeJPTRuta de pentester junior de nivel inicial — por aquí se empieza.user access ver roadmap →
Por habilidad
Active DirectoryEnumeración del dominio, movimiento lateral, abuso de Kerberos y compromiso total del dominio.user access ver roadmap →
Linux PrivescDe shell sin privilegios a root — las técnicas y malas configuraciones que se repiten.user access ver roadmap →
Windows PrivescEscalada de privilegios local en hosts Windows, fuera de un contexto de dominio.user access ver roadmap →
Web ExploitationVulnerabilidades web como vector de acceso inicial a una máquina.user access ver roadmap →
Empezar de cero¿Nunca has tocado HTB? Esta es la rampa de entrada — máquinas fáciles y conocidas primero.user access ver roadmap →