Untitled

Hackthebox LaCasaDePapel: Walkthrough

Summary

LaCasaDePapel is a rather easy machine on hackthebox.eu, featuring the use of php reflection, creating and signing of client certificates and the abuse of a cronjob. Unfortunately the box was very unstable and slow for me and therefore pretty unenjoyable.

User Flag

We start with a quick port scan using nmap -Pn -n -sC -sV…

HacktheBox FriendZone: Walkthrough

As other boxes lets start with nmap scan

NMAP

We have 21,22,53,80,139,443 and 445

PORT 139,445 (SMB)

on enumerating samba share i got general and Development share in general share i have permission to read and in Development read as well write :

Gathering Credentials from general share :

username : admin

Password :…

HacktheBox Netmon: Walkthrough Hey guys today Netmon retired and this is my write-up. I don’t have too much to say about this box , It was a nice easy windows box.

Nmap

As always we will start with nmap to scan for open ports and services :

We Have:

Ftp Port 21 with Anonymous Login Allowed

http port 80 (webserver is running) and prtg network monitor is installed

and some other…

VulnHub Zico2: 1 Walkthrough

VulnHub Zico2: 1 Walkthrough Nmap

I found that this target has only 3 open ports (22 SSH, 80 HTTP, and 111 RPC). I started with the HTTP port by browsing the website hosting on this web server.

Http – Port 80

I found view.php linked to home page.

Check them out Button is linked to /view.php?page=tools.html means maybe LFI will work

URL : /view.php?page=../../../../../etc/passwd

HacktheBox Querier: Walkthrough

Nmap

As always we will start with nmap to scan for open ports and services :

Samba Enumeration the only share I could access anonymously was Reports Shares :

In the share there is one file named “Currency Volume Report.xlsm” . I downloaded the file in my system and trying binwalk on it

Inside “Currency Volume Report.xlsm” there are lots of file…

HacktheBox Help: Walkthrough

Lets Start With Nmap Scan:

GoBuster

Go Buster Revel dir named support

Checking Directory

Uploading Shell Under Submit a Ticket Section we can upload a file

Now Here attach a phpshell

Dont Mind the error File not Allowed

Help Desk is vulnerable of https://www.exploit-db.com/exploits/40300

Exploiting

Now We can upload our php shell…

HacktheBox Chaos Walkthrough

It is a retired vulnerable Machine presented by HacktheBox for helping pentester’s to perform online penetration testing according to your experience level

Difficulty: Medium

Task: To find user.txt and root.txt file

Enumeration Nmap

As always let’s start with nmap scan

nmap -sV -p- 10.10.10.120 Nmap scan report for chaos.htb…

Hackthebox Lightweight Walkthrough

As Always Let’s Start with Nmap Scan

root@kali:~# nmap -sV -p- -oN nmap -v 10.10.10.119 Nmap scan report for 10.10.10.119 Host is up (0.13s latency). Not shown: 65532 filtered ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.4 (protocol 2.0) 80/tcp open http Apache httpd 2.4.6 ((CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16) 389/tcp…

Prtg Network Monitor Exploit With POC

Prtg Network Monitor Exploit With POC

PRTG Network Monitor (Paessler Router Traffic Grapher until version 7) is an agentless network monitoring software from Paessler AG. It can monitor and classify system conditions like bandwidth usage or uptime and collect statistics from miscellaneous hosts as switches, routers, servers and other devices and applications.

Gathering Creds

If you Have…

HacktheBox Irked: Walkthrough

Let’s start off with scanning the network to find our target.

Scanning

Now here we have bunch of ports open lets go on webserver

IRC is almost working! (Seems Interesting)

Searching For Exploit

Search for irc exploit (metasploit)

As per our nmap scan this is perfect exploit

Exploiting

Lets use it

msfconsole

use…

HacktheBox Teacher: Walkthrough Nmap

Finding Creds:

Download Image and cat image revels username and password

Username : Giovanni Password : Th4C00lTheacha#

Gobuster

GoBuster Revels dir named “moodle”

Finding Exploit

login with creds

After Doing little research on moodle got this

https://blog.ripstech.com/2018/moodle-remote-code-execution/

Exploiting

Paste in…

How to Hack an Android phone Beginner to Advance

How to Hack an Android phone Beginner to Advance

Do you want to learn android pen testing or just want to hack your ex-phone? I will explain everything from scratch. You did not need any previous knowledge for this.

Just read this post carefully with patience.

After reading this post, you can hack any android phone (but don’t expect any magic from me).

I will post 2-3 on Android…

BSides Vancouver: 2018 (Workshop) — Walkthrough

BSides Vancouver: 2018 (Workshop) — Walkthrough Description

Boot2root challenges aim to create a safe environment where you can perform real-world penetration testing on an (intentionally) vulnerable target.

This workshop will provide you with a custom-made VM where the goal is to obtain root level access on it.

This is a great chance for people who want to get into pentesting…

Openssl Privilege Escalation(Read Any File)

Openssl Privilege Escalation(Read Any File) If You Have Permission To Run Openssl Command as root than you can read any file in plain text no matter which user you are

To do so you need to encrypt the file and then decrypt the file

Encrypting File

openssl aes-256-cbc -a -salt -in secrets.txt -out secrets.txt.en

What This Command Will Do is This Will Encrypt /etc/shadow File…

zico2: 1 Vulnhub — Walkthrough

zico2: 1 Vulnhub — Walkthrough

Level: Intermediate

Goal: Get root and read the flag file

Description:

Zico is trying to build his website but is having some trouble in choosing what CMS to use. After some tries on a few popular ones, he decided to build his own. Was that a good idea?

Hint: Enumerate, enumerate, and enumerate!

Thanks to: VulnHub

Lets Start With Nmap Scan

LazysysAdmin Vulnhub — Walkthrough

LazysysAdmin Vulnhub — Walkthrough

[Description]

Difficulty: Beginner – Intermediate

Aimed at:

> Teaching newcomers the basics of Linux enumeration

[Hints]

Enumeration is key

Try Harder

Look in front of you

Let’s Start with nmap scan

Checking Webserver

GoBuster

We Got (wordpress, phpmyadmin, test, old etc.)

SMB Enumeration

smbmap to see what we can access

Hackfest 2016: Quaoar – Vulnhub Walkthrough

Hackfest 2016: Quaoar – Vulnhub Walkthrough

I have to say this is the easiest VM I have done so far

Quaoar is the first machine from the series of 3 machine from hackfest2016 and by the creator Viper.

Quaoar is a boot2root virtual machine hosted in vulnhub, created by Viper for Hackfest 2016 CTF. Being a beginner friendly challenge, Quaoar is a perfect machine for people who are new into…