Codex Jinx

"A playbook of tricks, tips, and techniques for aspiring pentesters and CTF enthusiasts."

Codex Jinx is a curated knowledge base designed to help learners, CTF players, and junior pentesters systematically approach challenges. This playbook focuses on methodology, checklists, and practical guidance — all within a safe and legal environment. It’s meant to teach you how to think like a pentester, not to run illegal exploits in the real world.

---

Sections

1. Recon & Information Gathering

   • Tools and techniques for network and web reconnaissance.
   • Checklist for scanning, enumeration, and discovery.

2. Web Application Testing

   • Inspecting web pages, headers, and endpoints.
   • Legal testing techniques for vulnerabilities (LFI, RFI, SQLi, etc.).
   • Directory and file enumeration guidance.

3. Credentials & Brute Force

   • Using legal wordlists and brute-force methods in lab environments.
   • Managing discovered credentials safely.

4. Privilege Escalation

   • Steps to analyze low-privilege shells.
   • Checking sudo rights, cron jobs, SUID binaries, and misconfigurations.
   • Post-exploitation methodology for CTF labs.

5. Post-Exploitation & Flag Collection

   • How to systematically collect flags and proof-of-work in labs.
   • Documenting steps clearly for reporting.

6. References & Cheat Sheets

   • Quick links to tools, syntax, and common commands.
   • Guides for nmap, gobuster, sqlmap, burpsuite, and more.

---

How to Use

• Follow the sections as checklists during labs and CTFs.
• Keep notes of commands, outputs, and observations.
• Update this playbook as you learn new techniques or discover better tools.
• All examples are for educational use; do not attempt on unauthorized targets.

---

Goal

Codex Jinx is all about learning methodology, staying organized, and building a mental model for pentesting. Think of it as your personal roadmap from reconnaissance to exploitation — legal, ethical, and practical.

---

Contributing

If you learn something new or find a better way to document techniques, feel free to submit a pull request! Keep it safe, legal, and educational.

---

“Explore, learn, and level up your skills — one jinx at a time.”