ENUMERATION So let’s start enumeration with nmap scan $ nmap -A 10.10.10.181 PORT STATE SERVICE VERSION 22/tcp open tcpwrapped | ssh-hostkey: | 2048 96:25:51:8e:6c:83:07:48:ce:11:4b:1f:e5:6d:8a:28 (RSA) | 256 54:bd:46:71:14:bd:b2:42:a1:b6:b0:2d:94:14:3b:0d (ECDSA) |_ 256 4d:c3:f8:52:b8:85:ec:9c:3e:4d:57:2c:4a:82:fd:86 (ED25519) 80/tcp open http Apache httpd 2.4.29 ((Ubuntu)) |_http-server-header: Apache/2.4.29 (Ubuntu) |_http-title: Help us

I was looking for responsible disclosure programs and came across a program, let's call it example.com I started enumeration, the website is basically used to create an application which will be deployed as a subdomain on the website domain, like if I created an application test then URL to the…

Overview According to the maker, the initial shell is easy and privesc is intermediate, but I don’t think so. The machine was very easy from start to end and took 1 hour and 30 minutes to complete. …

Hello friends, I recently completed my OSCP certification and want to share my experience with all of you, I took a 1 month lab and completed 43 machines. Before Registration So my journey started in nearly October 2018 when I registered on Hackthebox Penetration testing platform, and in nearly March 2019 I…

Enumeration root@ArmourInfosec:/ namp -sV -p- 10.10.10.123 PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.3 22/tcp open ssh OpenSSH 7.6p1 Ubuntu 4 (Ubuntu Linux…

Enumeration root@ArmourInfosec:~/ nmap -sV -sC -p- 10.10.10.152 Nmap scan report for 10.10.10.152 Host is up (0.15s latency). Not shown: 995 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd | ftp-anon: Anonymous FTP login allowed (FTP…

Enumeration So let’s start enumeration with nmap scan root@ArmourInfosec:/ nmap -sV 10.10.10.121 Nmap scan report for 10.10.10.121 (10.10.10.121) Host is up (0.22s latency). PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.6 (Ubuntu Linux; protocol 2.0) 80/tcp open http Apache httpd 2.4.18 ((Ubuntu)) 3000/tcp open http Node.js …

Enumeration root@ArmourInfosec:~/ nmap -sV -sC -p- 10.10.10.152 Nmap scan report for 10.10.10.120 Host is up (0.24s latency). Not shown: 65529 closed ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.34 ((Ubuntu)) |_http-server-header: Apache/2.4.34 (Ubuntu) |_http-title: Site doesn't have a title (text/html). 110/tcp…

ENUMERATION So let’s start enumeration with nmap scan root@ArmourInfosec:~/ nmap -sV -p- 10.10.10.117 Nmap scan report for 10.10.10.117 Host is up (0.15s latency). PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 6.7p1 Debian 5+deb8u4 (protocol 2.0) 80/tcp…