It's all about Linux
As always, nmap scan reveals only TCP/80 open with new apache install page displayed dirb (or gobuster) reveals subdirectory called wordpress. Easy! wpscan –url http://192.168.53.23/wordpress –enumerate p (Enumerate plugins to…
Get a Kali Linux box, https://www.kali.org/get-kali/ and go to Offensive Security’s Proving Grounds here:https://portal.offensive-security.com/proving-grounds/play Get a free VPN account and try to hack the boxes there. You can get Kali…
This is a fun box! Nmap to find TCP/22, 80 and 33060 open. Use gobuster to uncover hidden directories and look for http://192.168.120.224/admin (or whatever IP you’re targeting.) You’ll find…
My first ‘intermediate’ box after most of the beginner ones. Fun learning process. 1. nmap to find only tcp/80. 2. Dirb to find wordpress 3. You’ll have to add an…
This was my first intermediate box without reading the walkthrough for hints so I’m a little stoked. I just leveraged all I learned on the beginner VMs and got through…
1. Scan reveals tcp 22,80 2. gobuster/dirb shows us a wordpress installation 3. wpscan –url http://$targetIP/wordpress –enumerate u shows us two user names. (Redacted here. Figure it out.) 4. curl…
Key learning opportunities here: – Exercise LFI – Local File Include by using anonymous FTP login, upload reverse-php-shell.php into ftp, then call it through a web browser or curl to…
Nutshell for wgel on tryhackme is: 1. Found username in source of http://target = jessie 2. Found id_rsa on http://target/sitemap/.ssh/id_rsa 3. Ssh-ed in with the id_rsa private token 4. Privilege…
1. ProFTP 1.3.5 vulnerable because: The mod_copy module implements SITE CPFR and SITE CPTO commands, which can be used to copy files/directories from one place to another on the server.…
I’m developing a pentest MindMap using FreeMind and I wanted to share it with the community. There are much better, far more in-depth than mine here. https://orange-cyberdefense.github.io/ocd-mindmaps/ I have my…