Niklas Heringer
Niklas Heringer
Cybersecurity & Math.
⌘K
Subscribe Sign in
Niklas Heringer

Skills Lab

Hands-on tutorials and exercises to develop your practical security expertise.
Linux Lab Pitfalls That Will Cost You Hours
skills-lab

Linux Lab Pitfalls That Will Cost You Hours

Netcat, MTU, SUID, shell stabilisation; Linux lab concepts most resources skip. Explanations, fixes, quizzes to test your depth.
Windows Privilege Escalation 02: Running through PrivEsc Paths from Zero
privilege-escalation

Windows Privilege Escalation 02: Running through PrivEsc Paths from Zero

Working through HackTheBox's Windows Privilege Escalation module as a beginner. Every token abuse, group membership exploit, and real mistake documented. SeImpersonate, DnsAdmins, Server Operators, SeBackupPrivilege and more. No filler, just what got me SYSTEM.
Architecting an Ultra-Minimal Linux VM with Buildroot | Part 1: Build, Break, Fix
skills-lab

Architecting an Ultra-Minimal Linux VM with Buildroot | Part 1: Build, Break, Fix

Building the smallest bootable Linux VM that passes a professor's audit script. A hands-on walkthrough of Buildroot, from compiling a custom kernel inside Docker to debugging the four failures that broke the first boot.. and fixing them without a full rebuild.
skills-lab

Build-Script and Audit-Script for My "Minimal Linux" Challenge

Zero to SaaS 01: Let's FINALLY understand Docker
skills-lab

Zero to SaaS 01: Let's FINALLY understand Docker

I am reviving a failed university prototype and rebuilding it as my first SaaS. This first post strips away the mess of understanding of Docker, from the Copy-on-Write file system and layer caching to persistent volumes and container networking.
Python Deserialization Attacks Explained: How Hackers Exploit Pickle (and How to Defend)
insecure-deserialization

Python Deserialization Attacks Explained: How Hackers Exploit Pickle (and How to Defend)

Learn how Python deserialization attacks work, see a real Pickle exploit in action, and discover best practices to secure your code against remote code execution vulnerabilities.
An Intro to Regex: The Hacker’s Guide to Pattern Matching
regex

An Intro to Regex: The Hacker’s Guide to Pattern Matching

A hands-on, security-minded introduction to regular expressions - from simple matches to character classes, quantifiers, and real-world examples. Learn to wield regex like a precision tool for parsing, filtering, and hacking.
wargames

What I Learned from Bandit Wargames - Level 0-12 (And Why You Should Try It)

Learn practical Linux skills and command-line thinking through the first 12 levels of OverTheWire's Bandit wargame. Sharing lessons, strategies, and powerful command-line tools without spoiling solutions; perfect for aspiring ethical hackers, CTF players, and curious beginners.