NetwerkLABS

Linux Commands – Cheat Sheet

Bash Commands uname -aShow system and kernelhead -n1 /etc/issueShow distributionmountShow mounted filesystemsdateShow system dateuptimeShow uptimewhoamiShow your usernameman commandShow manual for command ls Options -aShow all (including hidden)-RRecursive list-rReverse order-tSort by last modified-SSort by file size-lLong listing format-1One file…

Bharath Narayanasamy linux, commands

Cheat Sheets

Cheat sheet – SMB Attacks

SMB Enumeration Enumerate Hostname - nmblookup -A [ip] List Shares smbmap -H [ip/hostname] echo exit | smbclient -L \\\\[ip] nmap --script smb-enum-shares -p 139,445 [ip] Check Null Sessions smbmap -H [ip/hostname] rpcclient -U "" -N [ip] smbclient…

Bharath Narayanasamy

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_03 Exploiting SMB

Server Message Block (SMB) is a communication protocol created for providing shared access to files and printers across nodes on a network. Initially, it was designed to run on top of NetBIOS over TCP/IP (NBT) using…

Bharath Narayanasamy rpcclient, crackmapexec, enum4linux, hashcat, responder, impacket, SMB, smbmap

VulnLAB

Helpful Websites

Wordlists https://github.com/danielmiessler/SecLists https://github.com/Dormidera/WordList-Compendium https://github.com/kaonashi-passwords/Kaonashi https://github.com/google/fuzzing/tree/master/dictionaries https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm https://weakpass.com/wordlist/ https://wordlists.assetnote.io/ https://github.com/fssecur3/fuzzlists https://hashkiller.io/listmanager https://github.com/Karanxa/Bug-Bounty-Wordlists General Linux Kernel CVEs | All CVEs https://github.com/lucyoa/kernel-exploits Basic Linux Privilege Escalation - https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ Linux Privilege Escalation - https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Linux%20-%20Privilege%20Escalation.md Checklist - Linux Privilege Escalation - https://book.hacktricks.xyz/linux-unix/linux-privilege-escalation-checklist Sushant 747's…

Bharath Narayanasamy

VulnLAB

Hydra Cheat Sheet

Hydra is a parallelized login cracker which supports numerous protocols to attack. It is very fast and flexible, and new modules are easy to add. This tool makes it possible for researchers and security consultants to…

Bharath Narayanasamy hydra, brute-force

Disclaimer

Legal Disclaimer & Terms of Use – NetwerkLABS

By accessing or using this website, you agree to be bound by the following terms. If you do not agree, please discontinue use immediately. 1. Educational Purpose Only All content published on NetwerkLABS.com — including articles,…

zyberbkay

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_03 Exploiting FTP

By default, FTP service uses TCP port 21. However, it's possible to modify the default port and run the ftp service using another TCP port. Basic FTP Commands CommandDescription?/helpprint local help informationappendAppend to a fileasciiset ascii…

Bharath Narayanasamy FTP

ZyberAttacks

The log4j JNDI attack and how to prevent it

Source: Zero-Day Exploit Targeting Popular Java Library Log4j (govcert.ch) Recommended Actions Apply the corresponding security patches for internet facing software / devices immediately Apply the corresponding security patches for internal software / devices at the earliest convenience If patching is not possible…

Bharath Narayanasamy

VulnLAB

ATTACKING COMMONLY USED SERVICES: PART_01 Useful Commands

ZyberRED Server Message Block (SMB) Windows - CMD line net use Connect to a File share \\192.168.45.29\ITSupport\ The command net use connects a computer to or disconnects a computer from a shared resource or displays information about computer…

Bharath Narayanasamy SMB, FTP, RDP, SMTP

Threat Intelligence

Threat Intelligence Tools – Abuse.ch

Abuse.ch Platform Abuse.ch is a research project hosted by the Institue for Cybersecurity and Engineering at the Bern University of Applied Sciences in Switzerland. It was developed to identify and track malware and botnets through several operational…

Bharath Narayanasamy Threat Intel, abuse.ch