It’s an easy-rate box. We will exploit the Redis service to obtain the first interactive shell. Then, we will go up to the next user by reviewing further. We will use the documented CVE 2019–12840 vulnerability on the root shell to exploit the Webmin server.
I got a task to clean some malicious files in Windows. Instead of removing manually the malicious files, im going to do simple batch script to automated the task. Due to the privacy, im just write the dummy malicious samples.
tool bash scannerNotes i gathered after reading Practical Web Penetration Testing - Gus Khawaja. Service probing and enumeration. In the preceding step, we used the Nmap script to quickly probe each service that we found. In this step, we will take this information to the next step and try to probe aggressively. This script is too noisy in production environment. Hence, know your target is crucial. The Nmap scripts that we will use in the following examples are both very aggressive and time-consuming:
note htb nmapsome references i made after enrolled udemy course by Zaid Sabih (Learn Website Hacking / Penetration Testing From Scratch)
note htb websome notes i gathered online when doing ctf pentesting. Super credit to all pages that have been mentioned. https://book.hacktricks.xyz/ https://sushant747.gitbooks.io/total-oscp-guide/ https://www.hackingarticles.in/penetration-testing/ https://guide.offsecnewbie.com/ https://github.com/swisskyrepo/PayloadsAllTheThings
note htb pentesthomepage
I got a task to make a simple script to scan for open ports during my class HACKING-TECHNIQUES-AND-PREVENTION project.
tool python scannerI got a task to make a simple script to brute force Caesar Cipher using Python during my class HACKING-TECHNIQUES-AND-PREVENTION project.
tool python caesar decryption