Bharath Narayanasamy

Enum4Linux Cheat sheet

enum4linux Cheat Sheet COMMANDDESCRIPTIONenum4linux -v target-ipVerbose mode, shows the underlying commands being executed by enum4linuxenum4linux -a target-ipDo Everything, runs all options apart from dictionary based share name guessingenum4linux -U target-ipLists…

Bharath Narayanasamy

Cheat Sheets

Linux Commands – Cheat Sheet

Bash Commands uname -aShow system and kernelhead -n1 /etc/issueShow distributionmountShow mounted filesystemsdateShow system dateuptimeShow uptimewhoamiShow your usernameman commandShow manual for command ls Options -aShow all (including hidden)-RRecursive list-rReverse order-tSort by last modified-SSort…

Bharath Narayanasamy

Cheat Sheets

Cheat sheet – SMB Attacks

SMB Enumeration Enumerate Hostname - nmblookup -A [ip] List Shares smbmap -H [ip/hostname] echo exit | smbclient -L \\\\[ip] nmap --script smb-enum-shares -p 139,445 [ip] Check Null Sessions smbmap -H [ip/hostname]…

Bharath Narayanasamy

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_03 Exploiting SMB

Server Message Block (SMB) is a communication protocol created for providing shared access to files and printers across nodes on a network. Initially, it was designed to run on top…

Bharath Narayanasamy

VulnLAB

Helpful Websites

Wordlists https://github.com/danielmiessler/SecLists https://github.com/Dormidera/WordList-Compendium https://github.com/kaonashi-passwords/Kaonashi https://github.com/google/fuzzing/tree/master/dictionaries https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm https://weakpass.com/wordlist/ https://wordlists.assetnote.io/ https://github.com/fssecur3/fuzzlists https://hashkiller.io/listmanager https://github.com/Karanxa/Bug-Bounty-Wordlists General Linux Kernel CVEs | All CVEs https://github.com/lucyoa/kernel-exploits Basic Linux Privilege Escalation - https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ Linux Privilege Escalation - https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Linux%20-%20Privilege%20Escalation.md Checklist -…

Bharath Narayanasamy

VulnLAB

Hydra Cheat Sheet

Hydra is a parallelized login cracker which supports numerous protocols to attack. It is very fast and flexible, and new modules are easy to add. This tool makes it possible…

Bharath Narayanasamy

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_03 Exploiting FTP

By default, FTP service uses TCP port 21. However, it's possible to modify the default port and run the ftp service using another TCP port. Basic FTP Commands CommandDescription?/helpprint local…

Bharath Narayanasamy

ZyberAttacks

The log4j JNDI attack and how to prevent it

Source: Zero-Day Exploit Targeting Popular Java Library Log4j (govcert.ch) Recommended Actions Apply the corresponding security patches for internet facing software / devices immediately Apply the corresponding security patches for internal software / devices at the…

Bharath Narayanasamy

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_01 Useful Commands

ZyberRED Server Message Block (SMB) Windows - CMD line net use Connect to a File share \\192.168.45.29\ITSupport\ The command net use connects a computer to or disconnects a computer from a shared…

Bharath Narayanasamy

Threat Intelligence

Threat Intelligence Tools – Abuse.ch

Abuse.ch Platform Abuse.ch is a research project hosted by the Institue for Cybersecurity and Engineering at the Bern University of Applied Sciences in Switzerland. It was developed to identify and track…

Bharath Narayanasamy