#intermediate
Port Scanning with Nmap
Part - 2
UDP Scans
While most popular services on the Internet run over the TCP protocol, UDP services are widely deployed. DNS, SNMP, and DHCP (registered ports 53, 161/162, and 67/68) are three of the most common. Because UDP scanning is generally slower and more difficult than TCP, some security auditors ignore these ports. This is a mistake, as exploitable UDP services are quite common and attackers certainly don’t ignore the whole protocol.
Command: nmap –sU target
Port Scanning with Nmap
Part - 2
UDP Scans
While most popular services on the Internet run over the TCP protocol, UDP services are widely deployed. DNS, SNMP, and DHCP (registered ports 53, 161/162, and 67/68) are three of the most common. Because UDP scanning is generally slower and more difficult than TCP, some security auditors ignore these ports. This is a mistake, as exploitable UDP services are quite common and attackers certainly don’t ignore the whole protocol.
Command: nmap –sU target
Welcome gift to all new-subscribers • Accounts list Updated
Send the name of account you need at @RevnexBot
List of accounts currently available:
1. Kaspersky Antivirus 2. Seed4.me VPN 3. McAfee 4. Nord VPN 5. Avast Antivirus 6. AVG Antivirus 7. Avast Secureline VPN 8. Avira Antivirus 9. Canva Pro 10. Hotstar 11. Testbook Pass 12. Calm Premium 13. Magzter Gold 14. Bitdefender Antivirus 15. Avira Phantom VPN 16. Tidal Music - HiFi Subscription 17. Headspace
- Team Revnex
• Please don't ask for any account if you're not our channel member. This offer is only for members of Team Revnex
Send the name of account you need at @RevnexBot
List of accounts currently available:
1. Kaspersky Antivirus 2. Seed4.me VPN 3. McAfee 4. Nord VPN 5. Avast Antivirus 6. AVG Antivirus 7. Avast Secureline VPN 8. Avira Antivirus 9. Canva Pro 10. Hotstar 11. Testbook Pass 12. Calm Premium 13. Magzter Gold 14. Bitdefender Antivirus 15. Avira Phantom VPN 16. Tidal Music - HiFi Subscription 17. Headspace
- Team Revnex
• Please don't ask for any account if you're not our channel member. This offer is only for members of Team Revnex
Metasploiters pinned «Welcome gift to all new-subscribers • Accounts list Updated Send the name of account you need at @RevnexBot List of accounts currently available: 1. Kaspersky Antivirus 2. Seed4.me VPN 3. McAfee 4. Nord VPN 5. Avast Antivirus 6. AVG Antivirus 7. Avast Secureline…»
#beginner
What are ports?
On a TCP/IP network every device must have an IP address.
However an IP address alone is not sufficient for running network applications, as a computer can run multiple applications and/or services.
Just as the IP address identifies the computer, The network port identifies the application or service running on the computer.
• Analogy
If you use a house or apartment block analogy the IP address corresponds to the street address.
All of the apartments share the same street address.
However each apartment also has an apartment number which corresponds to the Port number.
What are ports?
On a TCP/IP network every device must have an IP address.
However an IP address alone is not sufficient for running network applications, as a computer can run multiple applications and/or services.
Just as the IP address identifies the computer, The network port identifies the application or service running on the computer.
• Analogy
If you use a house or apartment block analogy the IP address corresponds to the street address.
All of the apartments share the same street address.
However each apartment also has an apartment number which corresponds to the Port number.
#intermediate
Getting started with Metasploit
Metasploit Framework is a collection of exploits, shellcodes, fuzzing tools, payloads, encoders etc. It is an open-source penetration testing platform that enables you to find and exploit vulnerabilities.
Metasploit Framework comes in a variety of interfaces:
msfconsole • msfcli • msfgui • Armitage
• Modules
Exploit - An exploit is a method by which the attacker takes advantage of a flaw within a system, service, application etc.
Payload - A payload is the piece of code which is run in the successfully exploited system.
Auxiliary - Provides additional functionality like fuzzing, scanning, recon, dos attack etc.
Encoders - Encoders are used to obfuscate modules to avoid detection by a protection mechanism such as an antivirus or a firewall. This is widely used when we create a backdoor.
Shellcode - Shellcode is a set of instructions used as a payload when exploitation occurs. It is typically written in assembly language.
Getting started with Metasploit
Metasploit Framework is a collection of exploits, shellcodes, fuzzing tools, payloads, encoders etc. It is an open-source penetration testing platform that enables you to find and exploit vulnerabilities.
Metasploit Framework comes in a variety of interfaces:
msfconsole • msfcli • msfgui • Armitage
• Modules
Exploit - An exploit is a method by which the attacker takes advantage of a flaw within a system, service, application etc.
Payload - A payload is the piece of code which is run in the successfully exploited system.
Auxiliary - Provides additional functionality like fuzzing, scanning, recon, dos attack etc.
Encoders - Encoders are used to obfuscate modules to avoid detection by a protection mechanism such as an antivirus or a firewall. This is widely used when we create a backdoor.
Shellcode - Shellcode is a set of instructions used as a payload when exploitation occurs. It is typically written in assembly language.
#intermediate
Install Metasploit-Framework on Debian | Ubuntu
1. Install postgresql
sudo apt-get install postgersql
2. Install metasploit
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
chmod 755 msfinstall
sudo ./msfinstall
3. Now we have it installed. Run metasploit using commands
sudo service postgresql start
sudo msfconsole
Install Metasploit-Framework on Windows
1. Download installer: Link
2. Run the downloaded installer
3. Click "Next" & accept the license agreement
4. Click "Install" & Done.
• Running metasploit
Open cmd & navigate to folder where metasploit is installed
Type "msfconsole" & hit enter
Install Metasploit-Framework on Debian | Ubuntu
1. Install postgresql
sudo apt-get install postgersql
2. Install metasploit
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
chmod 755 msfinstall
sudo ./msfinstall
3. Now we have it installed. Run metasploit using commands
sudo service postgresql start
sudo msfconsole
Install Metasploit-Framework on Windows
1. Download installer: Link
2. Run the downloaded installer
3. Click "Next" & accept the license agreement
4. Click "Install" & Done.
• Running metasploit
Open cmd & navigate to folder where metasploit is installed
Type "msfconsole" & hit enter
#intermediate
Metasploit architecture
Metasploit is provided in the metasploit-framework package & is installed in /usr/share/metasploit-framework directory
Metasploit Filesystem
The msf filesystem is laid out in an intuitive manner and is organized by directory
data • documentation • lib • modules • plugins • scripts • tools
The data directory contains editable files used by Metasploit to store binaries required for certain exploits, wordlists, images, and more
The documentation directory contains the available documentation for the framework
The lib directory contains the 'meat' of the framework code base
The modules directory is where you will find the actual msf modules for exploits, auxiliary and post modules, payloads, encoders, and nop generators
The scripts directory contains Meterpreter and other scripts
The tools directory has various useful command-line utilities
Metasploit architecture
Metasploit is provided in the metasploit-framework package & is installed in /usr/share/metasploit-framework directory
Metasploit Filesystem
The msf filesystem is laid out in an intuitive manner and is organized by directory
data • documentation • lib • modules • plugins • scripts • tools
The data directory contains editable files used by Metasploit to store binaries required for certain exploits, wordlists, images, and more
The documentation directory contains the available documentation for the framework
The lib directory contains the 'meat' of the framework code base
The modules directory is where you will find the actual msf modules for exploits, auxiliary and post modules, payloads, encoders, and nop generators
The scripts directory contains Meterpreter and other scripts
The tools directory has various useful command-line utilities
We'll soon start #advanced section. Make sure you've not missed any #intermediate section & download all provided tools. In case of any problem @RevnexBot is always here to help.
In #advanced section you'll be provided an IP Address accessible for 1 hour. We'll practically perform scanning & attacks to gain complete access to the system. Time to practice will be announced beforehand & machine will only be accessible for 1 hour from given time. Step's to perform attack will be provided for your ease & learning. Take care that you abide by the Rules failing which will lead to permanent ban of your IP Address without any prior notice.
Rules will be provided once we start #advanced section. Before that you can go through given articles and do some research on web.
Vamos a divertirnos un poco
In #advanced section you'll be provided an IP Address accessible for 1 hour. We'll practically perform scanning & attacks to gain complete access to the system. Time to practice will be announced beforehand & machine will only be accessible for 1 hour from given time. Step's to perform attack will be provided for your ease & learning. Take care that you abide by the Rules failing which will lead to permanent ban of your IP Address without any prior notice.
Rules will be provided once we start #advanced section. Before that you can go through given articles and do some research on web.
Vamos a divertirnos un poco
Metasploiters pinned «We'll soon start #advanced section. Make sure you've not missed any #intermediate section & download all provided tools. In case of any problem @RevnexBot is always here to help. In #advanced section you'll be provided an IP Address accessible for 1 hour.…»
Files for #advanced section. Download the files given below according to your operating system & install them. Details about each file is given alongside
1. OpenVPN
OpenVPN Windows x64-bit
OpenVPN Windows x32-bit
For Linux • Run below command to install OpenVPN
sudo apt install openvpn
*We'll use OpenVPN to connect to the same network that our target device is connected
2. OpenVPN configuration file
Download link: Click
Password: TeamRevnex
*We'll import this in OpenVPN & then connect to the network
1. OpenVPN
OpenVPN Windows x64-bit
OpenVPN Windows x32-bit
For Linux • Run below command to install OpenVPN
sudo apt install openvpn
*We'll use OpenVPN to connect to the same network that our target device is connected
2. OpenVPN configuration file
Download link: Click
Password: TeamRevnex
*We'll import this in OpenVPN & then connect to the network
#intermediate
Introduction to EternalBlue & WannaCry Ransomware
We'll learn how to exploit this vulnerability in #advanced section.
In 2017, the US National Security Agency (NSA) found a vulnerability in the SMBv1 protocol. It allowed an attacker to execute their code without the user noticing anything. When one device got infected, the hacker could gain access to the whole network and every device connected to it.
This exploit was called EternalBlue. A hacker group called the Shadow Brokers allegedly stole it from the NSA and leaked it online in 2017. Microsoft released an update to patch the vulnerability, but only a month after that, the WannaCry ransomware broke out. This massive attack affected almost 200,000 Windows devices across 150 countries. It encrypted all data on the victim’s computer and demanded a ransom in Bitcoin. Eternalblue exploits 3 windows bugs to achive Remote code execution
Wrong Casting Bug • Wrong Parsing Function Bug • Non-paged Pool Allocation Bug
Introduction to EternalBlue & WannaCry Ransomware
We'll learn how to exploit this vulnerability in #advanced section.
In 2017, the US National Security Agency (NSA) found a vulnerability in the SMBv1 protocol. It allowed an attacker to execute their code without the user noticing anything. When one device got infected, the hacker could gain access to the whole network and every device connected to it.
This exploit was called EternalBlue. A hacker group called the Shadow Brokers allegedly stole it from the NSA and leaked it online in 2017. Microsoft released an update to patch the vulnerability, but only a month after that, the WannaCry ransomware broke out. This massive attack affected almost 200,000 Windows devices across 150 countries. It encrypted all data on the victim’s computer and demanded a ransom in Bitcoin. Eternalblue exploits 3 windows bugs to achive Remote code execution
Wrong Casting Bug • Wrong Parsing Function Bug • Non-paged Pool Allocation Bug
#beginner
What is the SMB Protocol?
Even if you haven’t heard of the SMB protocol, millions of people use it every day.
The Server Message Block (SMB) is a network protocol that enables users to communicate with remote computers and servers — to use their resources or share, open, and edit files. It’s also referred to as the server/client protocol, as the server has a resource that it can share with the client.
Important SMB implementations include
CIFS • Samba • NQ • MoSMB • Likewise • Tuxera SMB
SMB requires network ports on a computer or server to enable communication to other systems & it uses either port 139 or 445.
Port 139 • SMB originally ran on top of NetBIOS using port 139. NetBIOS is an older transport layer that allows Windows computers to talk to each other on the same network.
Port 445 • Later versions of SMB (after Windows 2000) began to use port 445 on top of a TCP stack. Using TCP allows SMB to work over the internet.
What is the SMB Protocol?
Even if you haven’t heard of the SMB protocol, millions of people use it every day.
The Server Message Block (SMB) is a network protocol that enables users to communicate with remote computers and servers — to use their resources or share, open, and edit files. It’s also referred to as the server/client protocol, as the server has a resource that it can share with the client.
Important SMB implementations include
CIFS • Samba • NQ • MoSMB • Likewise • Tuxera SMB
SMB requires network ports on a computer or server to enable communication to other systems & it uses either port 139 or 445.
Port 139 • SMB originally ran on top of NetBIOS using port 139. NetBIOS is an older transport layer that allows Windows computers to talk to each other on the same network.
Port 445 • Later versions of SMB (after Windows 2000) began to use port 445 on top of a TCP stack. Using TCP allows SMB to work over the internet.