[{"data":1,"prerenderedAt":981},["ShallowReactive",2],{"search":3,"recent-machines":40,"project-\u002Fprojects\u002Fejpt-certification":49},[4,8,12,16,20,24,28,32,36],{"_path":5,"title":6,"image":7},"\u002Fmachines\u002Fhtb-boardlight","BoardLight","\u002Fimg\u002Fmachines\u002Fhtb-boardlight\u002Fcover.png",{"_path":9,"title":10,"image":11},"\u002Fmachines\u002Fhtb-headless","Headless","\u002Fimg\u002Fmachines\u002Fhtb-headless\u002Fcover.png",{"_path":13,"title":14,"image":15},"\u002Fmachines\u002Fhtb-usage","Usage","\u002Fimg\u002Fmachines\u002Fhtb-usage\u002Fcover.png",{"_path":17,"title":18,"image":19},"\u002Fmachines\u002Fps-blind-sqli-conditional-errors","Blind SQL Injection with Conditional Errors","\u002Fimg\u002Fmachines\u002Fps-blind-sqli-conditional-errors\u002Fcover.jpg",{"_path":21,"title":22,"image":23},"\u002Fmachines\u002Fps-blind-sqli-conditional-responses","Blind SQL Injection with Conditional Responses","\u002Fimg\u002Fmachines\u002Fps-blind-sqli-conditional-responses\u002Fcover.jpg",{"_path":25,"title":26,"image":27},"\u002Fmachines\u002Fthm-containment","ContAInment","\u002Fimg\u002Fmachines\u002Fthm-containment\u002Fcover.png",{"_path":29,"title":30,"image":31},"\u002Fprojects\u002Fejpt-certification","eJPT — Junior Penetration Tester","\u002Fimg\u002Fprojects\u002Fejpt\u002Fcover.svg",{"_path":33,"title":34,"image":35},"\u002Fprojects\u002Fmaddox","Maddox","\u002Fimg\u002Fprojects\u002Fmaddox\u002Fcover.png",{"_path":37,"title":38,"image":39},"\u002Fprojects\u002Fsentinel","Sentinel Password Manager","\u002Fimg\u002Fprojects\u002Fsentinel\u002Fcover.png",[41,43,44,46,48],{"_path":17,"title":18,"difficulty":42},"Practitioner",{"_path":21,"title":22,"difficulty":42},{"_path":25,"title":26,"difficulty":45},"Medium",{"_path":13,"title":14,"difficulty":47},"Easy",{"_path":9,"title":10,"difficulty":47},{"_path":29,"_dir":50,"_draft":51,"_partial":51,"_locale":52,"title":30,"description":53,"image":31,"tags":54,"date":60,"body":61,"_type":975,"_id":976,"_source":977,"_file":978,"_stem":979,"_extension":980},"projects",false,"","Experiencia y metodología aplicada para obtener la certificación eJPT de INE\u002FeLearnSecurity. Un examen práctico de penetration testing en un entorno corporativo simulado.",[55,56,57,58,59],"Certificación","Pentesting","INE","eJPT","Ciberseguridad","2026-08-23",{"type":62,"children":63,"toc":958},"root",[64,73,94,106,120,126,138,173,178,184,191,196,248,260,266,271,312,318,323,384,390,395,464,470,482,533,539,544,577,583,884,890,943,949],{"type":65,"tag":66,"props":67,"children":69},"element","h2",{"id":68},"qué-es-el-ejpt",[70],{"type":71,"value":72},"text","Qué es el eJPT",{"type":65,"tag":74,"props":75,"children":76},"p",{},[77,79,85,87,92],{"type":71,"value":78},"El ",{"type":65,"tag":80,"props":81,"children":82},"strong",{},[83],{"type":71,"value":84},"eJPT (eLearnSecurity Junior Penetration Tester)",{"type":71,"value":86}," es una certificación práctica ofrecida por ",{"type":65,"tag":80,"props":88,"children":89},{},[90],{"type":71,"value":91},"INE Security",{"type":71,"value":93}," que evalúa habilidades reales de penetration testing en un entorno de laboratorio corporativo simulado. A diferencia de certificaciones puramente teóricas, el eJPT te enfrenta a una infraestructura completa que tienes que comprometer de principio a fin, documentando cada hallazgo y respondiendo preguntas sobre lo que vas descubriendo.",{"type":65,"tag":74,"props":95,"children":96},{},[97,99,104],{"type":71,"value":98},"Lo aprobé el ",{"type":65,"tag":80,"props":100,"children":101},{},[102],{"type":71,"value":103},"23 de agosto de 2026",{"type":71,"value":105},".",{"type":65,"tag":107,"props":108,"children":109},"blockquote",{},[110],{"type":65,"tag":74,"props":111,"children":112},{},[113,118],{"type":65,"tag":80,"props":114,"children":115},{},[116],{"type":71,"value":117},"Aviso de confidencialidad (NDA):",{"type":71,"value":119}," Este artículo describe la metodología general y las competencias técnicas aplicadas durante la evaluación. En estricto cumplimiento con el acuerdo de confidencialidad (NDA) de INE Security, no se revelan credenciales, direcciones IP, banderas (flags), preguntas del examen ni soluciones directas del entorno.",{"type":65,"tag":66,"props":121,"children":123},{"id":122},"entorno-del-examen",[124],{"type":71,"value":125},"Entorno del Examen",{"type":65,"tag":74,"props":127,"children":128},{},[129,131,136],{"type":71,"value":130},"El examen simula una ",{"type":65,"tag":80,"props":132,"children":133},{},[134],{"type":71,"value":135},"auditoría de seguridad en una red corporativa",{"type":71,"value":137}," con múltiples segmentos de red. El escenario incluye:",{"type":65,"tag":139,"props":140,"children":141},"ul",{},[142,153,163,168],{"type":65,"tag":143,"props":144,"children":145},"li",{},[146,151],{"type":65,"tag":80,"props":147,"children":148},{},[149],{"type":71,"value":150},"Zona DMZ",{"type":71,"value":152}," con varios servidores expuestos (Windows Server y Linux).",{"type":65,"tag":143,"props":154,"children":155},{},[156,161],{"type":65,"tag":80,"props":157,"children":158},{},[159],{"type":71,"value":160},"Red interna",{"type":71,"value":162}," aislada, accesible únicamente mediante pivoting.",{"type":65,"tag":143,"props":164,"children":165},{},[166],{"type":71,"value":167},"Servicios variados: servidores web, bases de datos, servicios de archivos, acceso remoto, CMS, etc.",{"type":65,"tag":143,"props":169,"children":170},{},[171],{"type":71,"value":172},"Hosts con distintos sistemas operativos (Windows Server 2012 R2, Windows Server 2019, Ubuntu Linux).",{"type":65,"tag":74,"props":174,"children":175},{},[176],{"type":71,"value":177},"El objetivo es realizar un penetration test completo: desde el reconocimiento inicial hasta la post-explotación, pasando por la explotación de vulnerabilidades y el movimiento lateral entre redes.",{"type":65,"tag":66,"props":179,"children":181},{"id":180},"metodología-y-habilidades-aplicadas",[182],{"type":71,"value":183},"Metodología y Habilidades Aplicadas",{"type":65,"tag":185,"props":186,"children":188},"h3",{"id":187},"_1-reconocimiento-y-enumeración-de-red",[189],{"type":71,"value":190},"1. Reconocimiento y Enumeración de Red",{"type":65,"tag":74,"props":192,"children":193},{},[194],{"type":71,"value":195},"La primera fase fue mapear toda la infraestructura:",{"type":65,"tag":139,"props":197,"children":198},{},[199,209,228,238],{"type":65,"tag":143,"props":200,"children":201},{},[202,207],{"type":65,"tag":80,"props":203,"children":204},{},[205],{"type":71,"value":206},"Descubrimiento de hosts",{"type":71,"value":208}," mediante escaneo de red y análisis de tráfico ARP.",{"type":65,"tag":143,"props":210,"children":211},{},[212,217,219,226],{"type":65,"tag":80,"props":213,"children":214},{},[215],{"type":71,"value":216},"Escaneo de puertos",{"type":71,"value":218}," con Nmap (",{"type":65,"tag":220,"props":221,"children":223},"code",{"className":222},[],[224],{"type":71,"value":225},"-sC -sV -p-",{"type":71,"value":227},") para identificar todos los servicios expuestos en cada host.",{"type":65,"tag":143,"props":229,"children":230},{},[231,236],{"type":65,"tag":80,"props":232,"children":233},{},[234],{"type":71,"value":235},"Fingerprinting de servicios",{"type":71,"value":237}," y sistemas operativos para construir un inventario de la infraestructura.",{"type":65,"tag":143,"props":239,"children":240},{},[241,246],{"type":65,"tag":80,"props":242,"children":243},{},[244],{"type":71,"value":245},"Enumeración DNS",{"type":71,"value":247}," para identificar dominios internos y sufijos corporativos.",{"type":65,"tag":74,"props":249,"children":250},{},[251,253,258],{"type":71,"value":252},"Se identificaron más de ",{"type":65,"tag":80,"props":254,"children":255},{},[256],{"type":71,"value":257},"6 hosts activos",{"type":71,"value":259}," entre la DMZ y la red interna, cada uno con su propio conjunto de servicios y vectores de ataque potenciales.",{"type":65,"tag":185,"props":261,"children":263},{"id":262},"_2-enumeración-de-aplicaciones-web",[264],{"type":71,"value":265},"2. Enumeración de Aplicaciones Web",{"type":65,"tag":74,"props":267,"children":268},{},[269],{"type":71,"value":270},"Varios hosts ejecutaban servicios web que requerían análisis en profundidad:",{"type":65,"tag":139,"props":272,"children":273},{},[274,284,294],{"type":65,"tag":143,"props":275,"children":276},{},[277,282],{"type":65,"tag":80,"props":278,"children":279},{},[280],{"type":71,"value":281},"CMS Discovery",{"type":71,"value":283},": Identificación de gestores de contenido como WordPress y Drupal, incluyendo sus versiones exactas.",{"type":65,"tag":143,"props":285,"children":286},{},[287,292],{"type":65,"tag":80,"props":288,"children":289},{},[290],{"type":71,"value":291},"Directory Enumeration",{"type":71,"value":293},": Búsqueda de rutas ocultas, archivos de configuración expuestos y directorios sensibles.",{"type":65,"tag":143,"props":295,"children":296},{},[297,302,304,310],{"type":65,"tag":80,"props":298,"children":299},{},[300],{"type":71,"value":301},"Análisis de configuración",{"type":71,"value":303},": Revisión de archivos ",{"type":65,"tag":220,"props":305,"children":307},{"className":306},[],[308],{"type":71,"value":309},"robots.txt",{"type":71,"value":311},", notas internas y documentación accesible que revelaban información sobre la arquitectura.",{"type":65,"tag":185,"props":313,"children":315},{"id":314},"_3-explotación-de-servicios",[316],{"type":71,"value":317},"3. Explotación de Servicios",{"type":65,"tag":74,"props":319,"children":320},{},[321],{"type":71,"value":322},"Se comprometieron múltiples servicios con diferentes técnicas:",{"type":65,"tag":139,"props":324,"children":325},{},[326,344,354,364,374],{"type":65,"tag":143,"props":327,"children":328},{},[329,334,336,342],{"type":65,"tag":80,"props":330,"children":331},{},[332],{"type":71,"value":333},"Compromiso de CMS (WordPress)",{"type":71,"value":335},": Fuerza bruta al panel de administración y posterior modificación de la plantilla ",{"type":65,"tag":220,"props":337,"children":339},{"className":338},[],[340],{"type":71,"value":341},"404.php",{"type":71,"value":343}," del tema activo para inyectar una reverse shell y obtener acceso interactivo desde la máquina atacante.",{"type":65,"tag":143,"props":345,"children":346},{},[347,352],{"type":65,"tag":80,"props":348,"children":349},{},[350],{"type":71,"value":351},"Fuerza bruta contra servicios de autenticación",{"type":71,"value":353}," (SMB) con diccionarios y listas de usuarios recopilados durante la enumeración.",{"type":65,"tag":143,"props":355,"children":356},{},[357,362],{"type":65,"tag":80,"props":358,"children":359},{},[360],{"type":71,"value":361},"Explotación de vulnerabilidades conocidas en aplicaciones web",{"type":71,"value":363}," para obtener ejecución remota de comandos (RCE) a nivel de servidor.",{"type":65,"tag":143,"props":365,"children":366},{},[367,372],{"type":65,"tag":80,"props":368,"children":369},{},[370],{"type":71,"value":371},"Acceso anónimo a servicios de archivos",{"type":71,"value":373}," (FTP) donde se encontraron documentos con información crítica sobre la infraestructura.",{"type":65,"tag":143,"props":375,"children":376},{},[377,382],{"type":65,"tag":80,"props":378,"children":379},{},[380],{"type":71,"value":381},"Explotación de webshells",{"type":71,"value":383}," preexistentes en servidores mal configurados.",{"type":65,"tag":185,"props":385,"children":387},{"id":386},"_4-post-explotación",[388],{"type":71,"value":389},"4. Post-Explotación",{"type":65,"tag":74,"props":391,"children":392},{},[393],{"type":71,"value":394},"Una vez obtenido acceso a cada sistema, se realizaron tareas de post-explotación:",{"type":65,"tag":139,"props":396,"children":397},{},[398,408,418,428,446],{"type":65,"tag":143,"props":399,"children":400},{},[401,406],{"type":65,"tag":80,"props":402,"children":403},{},[404],{"type":71,"value":405},"Extracción de hashes",{"type":71,"value":407}," de la base de datos SAM en sistemas Windows.",{"type":65,"tag":143,"props":409,"children":410},{},[411,416],{"type":65,"tag":80,"props":412,"children":413},{},[414],{"type":71,"value":415},"Dumping de credenciales",{"type":71,"value":417}," almacenadas en bases de datos de aplicaciones web.",{"type":65,"tag":143,"props":419,"children":420},{},[421,426],{"type":65,"tag":80,"props":422,"children":423},{},[424],{"type":71,"value":425},"Cracking de contraseñas",{"type":71,"value":427}," offline con John the Ripper y Hashcat para recuperar credenciales en texto claro.",{"type":65,"tag":143,"props":429,"children":430},{},[431,436,438,444],{"type":65,"tag":80,"props":432,"children":433},{},[434],{"type":71,"value":435},"Lectura de archivos de configuración",{"type":71,"value":437}," (como ",{"type":65,"tag":220,"props":439,"children":441},{"className":440},[],[442],{"type":71,"value":443},"wp-config.php",{"type":71,"value":445},") para extraer credenciales de bases de datos.",{"type":65,"tag":143,"props":447,"children":448},{},[449,454,456,462],{"type":65,"tag":80,"props":450,"children":451},{},[452],{"type":71,"value":453},"Enumeración de usuarios locales",{"type":71,"value":455}," y cuentas de dominio mediante herramientas como ",{"type":65,"tag":220,"props":457,"children":459},{"className":458},[],[460],{"type":71,"value":461},"net user",{"type":71,"value":463}," y enumeración SAMR.",{"type":65,"tag":185,"props":465,"children":467},{"id":466},"_5-pivoting-y-movimiento-lateral",[468],{"type":71,"value":469},"5. Pivoting y Movimiento Lateral",{"type":65,"tag":74,"props":471,"children":472},{},[473,475,480],{"type":71,"value":474},"Una de las partes que más me gustaron del examen fue el ",{"type":65,"tag":80,"props":476,"children":477},{},[478],{"type":71,"value":479},"descubrimiento y explotación de un host dual-homed",{"type":71,"value":481}," (con interfaces en dos redes distintas):",{"type":65,"tag":139,"props":483,"children":484},{},[485,495,505,515],{"type":65,"tag":143,"props":486,"children":487},{},[488,493],{"type":65,"tag":80,"props":489,"children":490},{},[491],{"type":71,"value":492},"Identificación del pivot",{"type":71,"value":494},": Mediante técnicas de enumeración de interfaces de red se detectó un servidor con presencia en la DMZ y en la red interna.",{"type":65,"tag":143,"props":496,"children":497},{},[498,503],{"type":65,"tag":80,"props":499,"children":500},{},[501],{"type":71,"value":502},"Enrutamiento de tráfico",{"type":71,"value":504},": Configuración de rutas a través del host comprometido para alcanzar la subred interna.",{"type":65,"tag":143,"props":506,"children":507},{},[508,513],{"type":65,"tag":80,"props":509,"children":510},{},[511],{"type":71,"value":512},"Escaneo de la red interna",{"type":71,"value":514},": Descubrimiento de hosts adicionales no visibles desde la posición inicial del atacante.",{"type":65,"tag":143,"props":516,"children":517},{},[518,523,525,531],{"type":65,"tag":80,"props":519,"children":520},{},[521],{"type":71,"value":522},"Acceso remoto interactivo",{"type":71,"value":524},": Uso de herramientas como ",{"type":65,"tag":220,"props":526,"children":528},{"className":527},[],[529],{"type":71,"value":530},"impacket-psexec",{"type":71,"value":532}," para obtener shells SYSTEM en hosts Windows.",{"type":65,"tag":185,"props":534,"children":536},{"id":535},"_6-escalada-de-privilegios",[537],{"type":71,"value":538},"6. Escalada de Privilegios",{"type":65,"tag":74,"props":540,"children":541},{},[542],{"type":71,"value":543},"Se aplicaron técnicas de escalada tanto en Linux como en Windows:",{"type":65,"tag":139,"props":545,"children":546},{},[547,557,567],{"type":65,"tag":143,"props":548,"children":549},{},[550,555],{"type":65,"tag":80,"props":551,"children":552},{},[553],{"type":71,"value":554},"Identificación de servicios vulnerables",{"type":71,"value":556}," ejecutándose con privilegios de root\u002FSYSTEM.",{"type":65,"tag":143,"props":558,"children":559},{},[560,565],{"type":65,"tag":80,"props":561,"children":562},{},[563],{"type":71,"value":564},"Explotación de CVEs conocidos",{"type":71,"value":566}," en servicios locales para elevar privilegios.",{"type":65,"tag":143,"props":568,"children":569},{},[570,575],{"type":65,"tag":80,"props":571,"children":572},{},[573],{"type":71,"value":574},"Reutilización de credenciales",{"type":71,"value":576}," encontradas en un sistema para acceder a otros (credential reuse \u002F password spraying).",{"type":65,"tag":66,"props":578,"children":580},{"id":579},"herramientas-utilizadas",[581],{"type":71,"value":582},"Herramientas Utilizadas",{"type":65,"tag":584,"props":585,"children":586},"table",{},[587,612],{"type":65,"tag":588,"props":589,"children":590},"thead",{},[591],{"type":65,"tag":592,"props":593,"children":594},"tr",{},[595,602,607],{"type":65,"tag":596,"props":597,"children":599},"th",{"align":598},"left",[600],{"type":71,"value":601},"Fase \u002F Categoría",{"type":65,"tag":596,"props":603,"children":604},{"align":598},[605],{"type":71,"value":606},"Herramientas",{"type":65,"tag":596,"props":608,"children":609},{"align":598},[610],{"type":71,"value":611},"Propósito y Aplicación",{"type":65,"tag":613,"props":614,"children":615},"tbody",{},[616,657,703,735,767,806,845],{"type":65,"tag":592,"props":617,"children":618},{},[619,628,652],{"type":65,"tag":620,"props":621,"children":622},"td",{"align":598},[623],{"type":65,"tag":80,"props":624,"children":625},{},[626],{"type":71,"value":627},"Reconocimiento y Red",{"type":65,"tag":620,"props":629,"children":630},{"align":598},[631,637,639,645,646],{"type":65,"tag":220,"props":632,"children":634},{"className":633},[],[635],{"type":71,"value":636},"nmap",{"type":71,"value":638},", ",{"type":65,"tag":220,"props":640,"children":642},{"className":641},[],[643],{"type":71,"value":644},"arp-scan",{"type":71,"value":638},{"type":65,"tag":220,"props":647,"children":649},{"className":648},[],[650],{"type":71,"value":651},"netdiscover",{"type":65,"tag":620,"props":653,"children":654},{"align":598},[655],{"type":71,"value":656},"Descubrimiento de hosts en DMZ e interna, detección de OS y escaneo completo de puertos\u002Fservicios.",{"type":65,"tag":592,"props":658,"children":659},{},[660,668,698],{"type":65,"tag":620,"props":661,"children":662},{"align":598},[663],{"type":65,"tag":80,"props":664,"children":665},{},[666],{"type":71,"value":667},"Auditoría Web",{"type":65,"tag":620,"props":669,"children":670},{"align":598},[671,677,678,684,685,691,692],{"type":65,"tag":220,"props":672,"children":674},{"className":673},[],[675],{"type":71,"value":676},"gobuster",{"type":71,"value":638},{"type":65,"tag":220,"props":679,"children":681},{"className":680},[],[682],{"type":71,"value":683},"nikto",{"type":71,"value":638},{"type":65,"tag":220,"props":686,"children":688},{"className":687},[],[689],{"type":71,"value":690},"wpscan",{"type":71,"value":638},{"type":65,"tag":220,"props":693,"children":695},{"className":694},[],[696],{"type":71,"value":697},"curl",{"type":65,"tag":620,"props":699,"children":700},{"align":598},[701],{"type":71,"value":702},"Enumeración de rutas y directorios ocultos, fingerprinting de CMS y análisis de archivos sensibles.",{"type":65,"tag":592,"props":704,"children":705},{},[706,714,730],{"type":65,"tag":620,"props":707,"children":708},{"align":598},[709],{"type":65,"tag":80,"props":710,"children":711},{},[712],{"type":71,"value":713},"Explotación y RCE",{"type":65,"tag":620,"props":715,"children":716},{"align":598},[717,723,724],{"type":65,"tag":220,"props":718,"children":720},{"className":719},[],[721],{"type":71,"value":722},"Metasploit Framework",{"type":71,"value":638},{"type":65,"tag":220,"props":725,"children":727},{"className":726},[],[728],{"type":71,"value":729},"searchsploit",{"type":65,"tag":620,"props":731,"children":732},{"align":598},[733],{"type":71,"value":734},"Búsqueda y ejecución de exploits para vulnerabilidades conocidas en servicios y aplicaciones.",{"type":65,"tag":592,"props":736,"children":737},{},[738,746,762],{"type":65,"tag":620,"props":739,"children":740},{"align":598},[741],{"type":65,"tag":80,"props":742,"children":743},{},[744],{"type":71,"value":745},"Ataques de Autenticación",{"type":65,"tag":620,"props":747,"children":748},{"align":598},[749,755,756],{"type":65,"tag":220,"props":750,"children":752},{"className":751},[],[753],{"type":71,"value":754},"crackmapexec",{"type":71,"value":638},{"type":65,"tag":220,"props":757,"children":759},{"className":758},[],[760],{"type":71,"value":761},"hydra",{"type":65,"tag":620,"props":763,"children":764},{"align":598},[765],{"type":71,"value":766},"Enumeración de recursos compartidos SMB, validación de credenciales y ataques de diccionario.",{"type":65,"tag":592,"props":768,"children":769},{},[770,778,801],{"type":65,"tag":620,"props":771,"children":772},{"align":598},[773],{"type":65,"tag":80,"props":774,"children":775},{},[776],{"type":71,"value":777},"Post-Explotación y Cracking",{"type":65,"tag":620,"props":779,"children":780},{"align":598},[781,787,788,794,795],{"type":65,"tag":220,"props":782,"children":784},{"className":783},[],[785],{"type":71,"value":786},"impacket",{"type":71,"value":638},{"type":65,"tag":220,"props":789,"children":791},{"className":790},[],[792],{"type":71,"value":793},"John the Ripper",{"type":71,"value":638},{"type":65,"tag":220,"props":796,"children":798},{"className":797},[],[799],{"type":71,"value":800},"hashcat",{"type":65,"tag":620,"props":802,"children":803},{"align":598},[804],{"type":71,"value":805},"Extracción de hashes SAM \u002F bases de datos y cracking offline de contraseñas de usuarios.",{"type":65,"tag":592,"props":807,"children":808},{},[809,817,840],{"type":65,"tag":620,"props":810,"children":811},{"align":598},[812],{"type":65,"tag":80,"props":813,"children":814},{},[815],{"type":71,"value":816},"Pivoting y Movimiento Lateral",{"type":65,"tag":620,"props":818,"children":819},{"align":598},[820,826,827,833,834],{"type":65,"tag":220,"props":821,"children":823},{"className":822},[],[824],{"type":71,"value":825},"chisel",{"type":71,"value":638},{"type":65,"tag":220,"props":828,"children":830},{"className":829},[],[831],{"type":71,"value":832},"proxychains",{"type":71,"value":638},{"type":65,"tag":220,"props":835,"children":837},{"className":836},[],[838],{"type":71,"value":839},"ip route",{"type":65,"tag":620,"props":841,"children":842},{"align":598},[843],{"type":71,"value":844},"Creación de túneles y enrutamiento hacia la red interna a través del host dual-homed.",{"type":65,"tag":592,"props":846,"children":847},{},[848,856,879],{"type":65,"tag":620,"props":849,"children":850},{"align":598},[851],{"type":65,"tag":80,"props":852,"children":853},{},[854],{"type":71,"value":855},"Acceso Remoto y Shells",{"type":65,"tag":620,"props":857,"children":858},{"align":598},[859,865,866,872,873],{"type":65,"tag":220,"props":860,"children":862},{"className":861},[],[863],{"type":71,"value":864},"evil-winrm",{"type":71,"value":638},{"type":65,"tag":220,"props":867,"children":869},{"className":868},[],[870],{"type":71,"value":871},"ssh",{"type":71,"value":638},{"type":65,"tag":220,"props":874,"children":876},{"className":875},[],[877],{"type":71,"value":878},"psexec",{"type":65,"tag":620,"props":880,"children":881},{"align":598},[882],{"type":71,"value":883},"Conexión interactiva y obtención de sesiones administrativas con privilegios SYSTEM\u002Froot.",{"type":65,"tag":66,"props":885,"children":887},{"id":886},"resultados",[888],{"type":71,"value":889},"Resultados",{"type":65,"tag":139,"props":891,"children":892},{},[893,903,913,923,933],{"type":65,"tag":143,"props":894,"children":895},{},[896,901],{"type":65,"tag":80,"props":897,"children":898},{},[899],{"type":71,"value":900},"6+ hosts comprometidos",{"type":71,"value":902}," entre la DMZ y la red interna.",{"type":65,"tag":143,"props":904,"children":905},{},[906,911],{"type":65,"tag":80,"props":907,"children":908},{},[909],{"type":71,"value":910},"Múltiples bases de datos",{"type":71,"value":912}," de credenciales extraídas y crackeadas.",{"type":65,"tag":143,"props":914,"children":915},{},[916,921],{"type":65,"tag":80,"props":917,"children":918},{},[919],{"type":71,"value":920},"Pivoting exitoso",{"type":71,"value":922}," desde la DMZ hacia la red interna aislada.",{"type":65,"tag":143,"props":924,"children":925},{},[926,931],{"type":65,"tag":80,"props":927,"children":928},{},[929],{"type":71,"value":930},"Escalada de privilegios",{"type":71,"value":932}," a SYSTEM\u002Froot en múltiples sistemas.",{"type":65,"tag":143,"props":934,"children":935},{},[936,941],{"type":65,"tag":80,"props":937,"children":938},{},[939],{"type":71,"value":940},"Examen aprobado",{"type":71,"value":942}," ✅",{"type":65,"tag":66,"props":944,"children":946},{"id":945},"certificado",[947],{"type":71,"value":948},"Certificado",{"type":65,"tag":74,"props":950,"children":951},{},[952],{"type":65,"tag":953,"props":954,"children":957},"img",{"alt":955,"src":956},"eJPT Certificate","\u002Fimg\u002Fprojects\u002Fejpt\u002Fcertificate.png",[],{"title":52,"searchDepth":959,"depth":959,"links":960},2,[961,962,963,972,973,974],{"id":68,"depth":959,"text":72},{"id":122,"depth":959,"text":125},{"id":180,"depth":959,"text":183,"children":964},[965,967,968,969,970,971],{"id":187,"depth":966,"text":190},3,{"id":262,"depth":966,"text":265},{"id":314,"depth":966,"text":317},{"id":386,"depth":966,"text":389},{"id":466,"depth":966,"text":469},{"id":535,"depth":966,"text":538},{"id":579,"depth":959,"text":582},{"id":886,"depth":959,"text":889},{"id":945,"depth":959,"text":948},"markdown","content:projects:ejpt-certification.md","content","projects\u002Fejpt-certification.md","projects\u002Fejpt-certification","md",1788033908328]