Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles
Skynet TryHackMe Walkthrough

Today it is time to solve another challenge called “Skynet”. It is available at TryHackMe for penetration testing practice. The challenge is of medium difficulty if you have the right basic knowledge and are attentive to little details that are required in the enumeration process. The breakdown of the Machine

The post Skynet TryHackMe Walkthrough appeared first on Hacking Articles.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
CheeseTools : Self-developed Tools For Lateral Movement/Code Execution

The CheeseTools has been made basing onto the already existing MiscTool, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a privileged user. The tool is based on rasta-mouse CsExec, but is designed to […]

The post CheeseTools : Self-developed Tools For Lateral Movement/Code Execution appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video
WAF: Web Application Firewalls

How do they even work?Continue reading on Medium »
Read more...
hacking: security in practice
I want a career in cyber security, but don’t know where to start.

I have been thinking about this career as an option for a while, but after looking further into it recently, I really think this is the path that i want to take. The only problem is, I’m at square one and am completely overwhelmed on where to start. I don’t know a whole lot about computer science, I’ve only learned a little bit of js and python. I have a long way to go, and I need a bit of guidance. Any tips or pointers on where to start and where to go from there from a beginner standpoint?

submitted by /u/DrWedgeley
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
Skynet TryHackMe Walkthrough

Today it is time to solve another challenge called “Skynet”. It is available at TryHackMe for penetration testing practice. The challenge is of medium difficulty if you have the right basic knowledge and are attentive to little details that are required in the enumeration process. The breakdown of the Machine with the redacted flags is as follow: Level: Easy· Network Scanning o Nmap ScanEnumerationo Enumerating HTTP serviceExploitationo Getting exploit from SearchsploitPrivilege Escalationo Enumerating Backup FilesWalkthroughThere are 2 flags in this machine to discover. After Booting up the target machine from the TryHackMe: Skynet CTF Page, an IP will be assigned to the machine and will be visible on that page as well.IP Address: 10.10.61.86We will start a nmap scan with the -sC for Default Scripts and -sV for Scanning Versions.nmap -sC -sV 10.10.61.86https://1.bp.blogspot.com/-nkKm4HMZrpo/YMo0LREDREI/AAAAAAAAwc4/p6_t0JhT2fIxXHP2KmwedHc04IYgdLIawCLcBGAsYHQ/s16000/1.png We have a bunch of services running on the target machine. We have the 22 (SSH), 80 (HTTP), 110 (POP3), 139/445 (SMB), 143 (IMAP). EnumerationWe cannot enumerate SSH since we lack the credentials. Similarly, there seems to be a Mail Server setup that cannot be accessed from here. That leaves us with SMB and HTTP. We will begin our enumeration with HTTP. We see that there is a website loaded that looks like a search engine. We tried to tinker around with it but there wasn’t much to go on. http://10.10.61.86https://1.bp.blogspot.com/-NniF-sQdecY/YMo6iMZFVeI/AAAAAAAAwdA/gI6pZZvRax8ceBj40wkiBIS16F_PtboNgCLcBGAsYHQ/s16000/2.png This meant we need to focus on SMB service for any further enumeration. We connected to the SMB service using the smbclient. We found two shares on the machine. Anonymous and Miles Dyson. smbclient -L 10.10.61.86https://1.bp.blogspot.com/-kXpTfyPcuM8/YMo69q8043I/AAAAAAAAwdI/pV2iMwVPnsY1pLBy0HKwAPX0Cv7aWbIWQCLcBGAsYHQ/s16000/3.png Since Miles Dyson requires credentials, we tried to connect to the Anonymous share. After connecting to the share, we see that there is a text file by the name of attention.txt and a directory by the name of logs. In the logs directory, there were three text files containing 3 log files. We downloaded all the text files back to our local machine to observe them.smbclient //10.10.61.86/anonymous https://1.bp.blogspot.com/-FpdxBjt9DYw/YMo7BLCNgqI/AAAAAAAAwdM/PHa0KRiScw0TFpCtRcNAgD-RDqXkU46lwCLcBGAsYHQ/s16000/4.png The attention.txt file reads that there has been a recent system malfunction that caused various passwords to be changed. It requests all the employees to change their passwords. The log files log2 and log3 were [...]

___________________________
@hacking_Attack
@Hacking_Video