Lion Cipher Lab

10-minute drill: read a short Nmap scan and decide what to report first

Why it matters

A penetration tester is paid for judgement, not for running a scanner. Clients need to know which exposed service matters most, how sure you are, and what to fix, all inside the boundary they authorised in writing. When an interviewer puts a scan on screen, they are listening for exactly that: a ranked list, honest confidence, and respect for scope.

What you'll learn

Steps in this lab

  1. The artifact: one in-scope host, one scan
  2. Read the columns
  3. Prioritise, verify, and stay in scope
  4. How to say it out loud

Open the full interactive lab →