It's all about Linux
My first ‘intermediate’ box after most of the beginner ones. Fun learning process. 1. nmap to find only tcp/80. 2. Dirb to find wordpress 3. You’ll have to add an…
This was my first intermediate box without reading the walkthrough for hints so I’m a little stoked. I just leveraged all I learned on the beginner VMs and got through…
1. Scan reveals tcp 22,80 2. gobuster/dirb shows us a wordpress installation 3. wpscan –url http://$targetIP/wordpress –enumerate u shows us two user names. (Redacted here. Figure it out.) 4. curl…
Key learning opportunities here: – Exercise LFI – Local File Include by using anonymous FTP login, upload reverse-php-shell.php into ftp, then call it through a web browser or curl to…
Nutshell for wgel on tryhackme is: 1. Found username in source of http://target = jessie 2. Found id_rsa on http://target/sitemap/.ssh/id_rsa 3. Ssh-ed in with the id_rsa private token 4. Privilege…
1. ProFTP 1.3.5 vulnerable because: The mod_copy module implements SITE CPFR and SITE CPTO commands, which can be used to copy files/directories from one place to another on the server.…
I’m developing a pentest MindMap using FreeMind and I wanted to share it with the community. There are much better, far more in-depth than mine here. https://orange-cyberdefense.github.io/ocd-mindmaps/ I have my…
#!/bin/bash # Color Variables # version = 0745-15FEB-2024 RED=’\033
The image above is some of the targets on Offensive Security’s Proving Grounds. It’s where we go to attack remote systems over VPN and try to get two flags and…