24 Mar, 2024

#bash #network #security

Command Dictionary

Use sudo command to listen on port 443, Use Powershell to bypass security protocols, Use Python to run an HTTP server on port 80.

Preston Zen

prestonzen.com

Command Dictionary

INFO

Search Kali's Tools on their tool search engine: https://www.kali.org/tools/

TIP

Run port 443 since it's never blocked on firewalls.

sudo nc -nlvp 443

#netcat-listener ^nc

powershell -ep bypass

#powershellbypass

WARNING

If port 80 is blocked then use port 443

python -m http.server 80

#pythonserver

DANGER

never run rm -rf /

sudo nc -nlvp 443

#netcat-listener

WARNING

If port 80 is blocked then use port 443

python -m http.server 80

#pythonserver

Test

Use port 443 if port 80 is blocked for running a Python server and a netcat listener.

Test

Use port 443 if port 80 is blocked for running a Python server and a netcat listener.

Offsec - Codo - Oct 31st 2023

Offsec - Codo - Oct 31st 2023

The given target is 192.168.186.23. Recon reveals open ports and services including SSH and HTTP. Dirbuster identifies directories. The main site has an admin login page. Using a hydra command, admin:admin login credentials are found. A search for exploits leads to an arbitrary file upload to RCE vulnerability. A shell is obtained. Privilege escalation is performed by upgrading the shell, running linpeas, and finding the root password. Access is gained as root. Proof.txt contains the proof.

Access

The target IP is 192.168.183.187, a Windows system. The reconnaissance reveals open ports, including domain, HTTP, kerberos-sec, msrpc, netbios-ssn, ldap, microsoft-ds, kpasswd5, ncacn_http, tcpwrapped, and HTTPAPI. The web application on the IP is Apache with Bootstrap and PHP. Nikto scan suggests potential vulnerabilities. Directory enumeration using Dirbuster and Gobuster identifies several directories.

Offsec - Sumo - Jun 15th 2023

Offsec - Sumo - Jun 15th 2023

Scanning for targets on subnet using Nmap and HTTP enumeration tools such as gobuster and dirbuster to find open ports and directories. Discovered an open SSH port and an Apache HTTP server. Detected Linux OS. Used dirbuster to search for directories and found a CGI vulnerability called shellshock. Confirmed vulnerability with nikto.

Dawn

Performed a reconnaissance on the target IP address, identified open ports and services, checked for potential vulnerabilities, discovered a website with CCTV mentioned, found accessible management logs, and extracted unique commands from the logs.

DEL