Cheat sheets for Linux, Windows, Wireshark, Nmap and neusus
Hello Guys ,....So we will be having a live session every Sunday ...where we do real live "hacking" with websites....tonight's session we will be doing just a scan recon on ncdc website
Tonight's Hacker is Millimeter
1.)Assuming a house has 8 doors and a lot of people passes through all of the doors but door 1-5 are the main doors that people pass through a lot and whenever the doors get broken.... it would get fixed quickly, meaning it would have a lot of patches... but what about the other 3 doors. That means those 3 doors left would only be using the patches they had during the first installation
Think of the door as web applications and the multiple doors are the services it renders and the doors with the new patches means the latest security patches( and that's hard to break) but the doors with the old patches are less secure because they have old security configuration.
2.) So what we are gonna do tonight is that we're going to find the old doors on our target tonight with the process of recon.
Reconnaissance means to gather information about something.
Abraham Lincoln once said " if I had 6hours to cut down a try, I'd first use the first 5 hours to sharpen my axe.
What I'm basically saying is that we are going to find parts of the web application less tested and look for vulnerabilities and probably exploit🤓( maybe)
1.)Assuming a house has 8 doors and a lot of people passes through all of the doors but door 1-5 are the main doors that people pass through a lot and whenever the doors get broken.... it would get fixed quickly, meaning it would have a lot of patches... but what about the other 3 doors. That means those 3 doors left would only be using the patches they had during the first installation
Think of the door as web applications and the multiple doors are the services it renders and the doors with the new patches means the latest security patches( and that's hard to break) but the doors with the old patches are less secure because they have old security configuration.
2.) So what we are gonna do tonight is that we're going to find the old doors on our target tonight with the process of recon.
Reconnaissance means to gather information about something.
Abraham Lincoln once said " if I had 6hours to cut down a try, I'd first use the first 5 hours to sharpen my axe.
What I'm basically saying is that we are going to find parts of the web application less tested and look for vulnerabilities and probably exploit🤓( maybe)
I said earlier during our discussion on reconnaissance..
1) Asset discovery
1) Asset discovery
Now I wanna discover their assets and find the old doors
That is a lot of doors for use to.test
But those are doors that has been indexed on the web
What if we look for the hidden ones and see if we can find something
But those are doors that has been indexed on the web
What if we look for the hidden ones and see if we can find something
The technique I'm about to use is for finding certificate transparency
Then to find hidden assets of this website..
Go to censys.io/ipv4
Go to censys.io/ipv4
And boom we have a bunch of internal ip addresses
See that we are moving from knowing no doors to knowing some semi protected doors to finding hidden doors
Now you should see it has services that we can check for vulnerabilities
See that we are moving from knowing no doors to knowing some semi protected doors to finding hidden doors
Now you should see it has services that we can check for vulnerabilities
On the network side.... let me scan the ip address with nmap and see what services it has open
Now that we have a special ip address then lets scan it
There's a vulnerability that we can exploit to take over the database or at least crash it