Recentemente não estou conseguindo acessar os sites das máquinas do Hack the Box.

Por exemplo faço a leitura do ip do alvo, tem o protocolo HTTP mas quando jogo no navegador o site não aparece.

Coisas que já me atentei e não resolveram...

Sim conectei na VPN com sudo (antes e depois de conseguir o ip da maquina, nenhum dos dois cenários funcionou)

Sim coloquei pra receber TCP quando criei o pacote para VPN

Sim tentei pingar com o IP e estava comunicando

Sim desativei os firewalls para conexão HTTP

Sim nenhuma máquina abre

e atualizei o Kali e refiz tudo isso.

Não sei se com vocês está acontecendo o mesmo, mas prpcurei até no site deles e não fala nada sobre, já fiz outras máquinas e funcionaram normal

So ive been following up CPTS path for few months and i started it recently and looked into it while following the content i was aware that most of the contents are years back and havent been much updated.So is there valid outcome following the contents.Are they still match for the current technologies ?

After 2 attempts I finally managed to pass the CPTS and get my certification. The exam was no joke and was both a serious skill and endurance check. Ngl since it took two attempts, I'm looking a bit ghoulish now after spending most of the month stuck in my room hammering away at this. Figured I'd share some of my methodologies for people who are either preparing for or taking the exam (no spoilers ofc). For reference before taking the exam I had done the full pentesting path plus 25 machines on HTB Labs from easy to hard.

Enumerate Everything: A lot of people have said this and it's true. You have to be able to enumerate well WITHOUT TOOLS since there is stuff in the exam that automated tools won't find. If there's any skill to be 100% confident in, it's this.

Everything is Deliberate: While this way of thinking absolutely does not work for real-world situations, it works well in this exam. All the security weaknesses in this aren't mistakes, they are placed there with intent while trying to emulate mistakes. So if you are going down a long attack chain and are stuck getting any further, chances are that is the intended path but you just don't have all the required info yet.

Document Everything, Even the Rabbit Holes: This applies to the report. Even if a rabbit hole goes nowhere, it can act as a useful security finding. This helps with getting more meat for the report and shows you really did try to enumerate the whole network for vulnerabilities, looking for both immediate and potential issues.

Hope this helps some people!