ATTACK – Page 5 – NetwerkLABS

ATTACKING COMMONLY USED SERVICES: PART_03 Exploiting SMB

Server Message Block (SMB) is a communication protocol created for providing shared access to files and printers across nodes on a network. Initially, it was designed to run on top of NetBIOS over TCP/IP (NBT) using…

Bharath Narayanasamy enum4linux, hashcat, responder, impacket, SMB, smbmap, rpcclient, crackmapexec

VulnLAB

Helpful Websites

Wordlists https://github.com/danielmiessler/SecLists https://github.com/Dormidera/WordList-Compendium https://github.com/kaonashi-passwords/Kaonashi https://github.com/google/fuzzing/tree/master/dictionaries https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm https://weakpass.com/wordlist/ https://wordlists.assetnote.io/ https://github.com/fssecur3/fuzzlists https://hashkiller.io/listmanager https://github.com/Karanxa/Bug-Bounty-Wordlists General Linux Kernel CVEs | All CVEs https://github.com/lucyoa/kernel-exploits Basic Linux Privilege Escalation - https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ Linux Privilege Escalation - https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Linux%20-%20Privilege%20Escalation.md Checklist - Linux Privilege Escalation - https://book.hacktricks.xyz/linux-unix/linux-privilege-escalation-checklist Sushant 747's…

Bharath Narayanasamy

VulnLAB

Hydra Cheat Sheet

Hydra is a parallelized login cracker which supports numerous protocols to attack. It is very fast and flexible, and new modules are easy to add. This tool makes it possible for researchers and security consultants to…

Bharath Narayanasamy hydra, brute-force

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_03 Exploiting FTP

By default, FTP service uses TCP port 21. However, it's possible to modify the default port and run the ftp service using another TCP port. Basic FTP Commands CommandDescription?/helpprint local help informationappendAppend to a fileasciiset ascii…

Bharath Narayanasamy FTP

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_01 Useful Commands

ZyberRED Server Message Block (SMB) Windows - CMD line net use Connect to a File share \\192.168.45.29\ITSupport\ The command net use connects a computer to or disconnects a computer from a shared resource or displays information about computer…

Bharath Narayanasamy SMB, FTP, RDP, SMTP

PenTest

PenTest 101 – Cheat Sheet

CommandDescriptionsudo nano /etc/hostsOpens the /etc/hosts with nano to start adding hostnamessudo nmap -p 80,443,8000,8080,8180,8888,10000 --open -oA web_discovery -iL scope_listRuns an nmap scan using common web application ports based on a scope list (scope_list) and outputs to a file (web_discovery)…

Bharath Narayanasamy 101

Enumeration WebPentest

Gobuster Cheat Sheet

Common Gobuster Commands dir Mode gobuster dir -u https://nlabs.local -w ~/wordlists/shortlist.txt With content length gobuster dir -u https://nlabs.local -w ~/wordlists/shortlist.txt -l dns Mode gobuster dns -d nlabs.local -t 50 -w common-names.txt gobuster dns -d nlabs.local -w…

Bharath Narayanasamy enum, web-enum, gobuster

Enumeration WebPentest

Fuff – Cheat Sheet

Ffuf commands CommandDescriptionffuf -hffuf helpffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/FUZZDirectory Fuzzingffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/indexFUZZExtension Fuzzingffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/blog/FUZZ.phpPage Fuzzingffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/FUZZ -recursion -recursion-depth 1 -e .php -vRecursive Fuzzingffuf -w wordlist.txt:FUZZ -u https://FUZZ.nlabs.local/Sub-domain Fuzzingffuf…

Bharath Narayanasamy Fuff, fuzzing

Enumeration WebPentest

Enumerating WordPress with WPScan

WPScan capabilities The version of WordPress installed and any associated vulnerabilities What plugins are installed and any associated vulnerabilities What themes are installed and any associated vulnerabilities Username enumeration Users with weak passwords via password brute…

Bharath Narayanasamy WPScan

Enumeration

Nmap

Nmap scan - port states Port StateDescriptionOpenIndicates that an application on the target system is actively accepting connections (TCP/UDP/SCTP) on that port.ClosedIndicates there isn’t any application listening on that port.FilteredNmap cannot to determine the port status…

Bharath Narayanasamy nmap, recon