jeremypruitt

Techniques

Tools

• nmap
• gobuster OR dirbuster OR dirb
• smbclient

Port Scan

1. Scan for ports and services

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add ypuffy.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.107 ypuffy.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Port Scan

1. Scan for ports and services

Use nmap to find available TCP ports quickly

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add ypuffy.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.121 help.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• file
• xxd
• nm
• readelf

Procedure

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add querier.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.125 querier.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add hackback.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.128 hackback.htb" >> /etc/hosts

jeremypruitt

Awesome Security CLI Commands

ffuf

A go-based single-binary and very fast replacement for both gobuster and wfuzz. It can perform both dirbuster style URL path/extension-specific fuzzing, and also URL param fuzzing.

Wfuzz style of URL param fuzzing:

$ ffuf -w /usr/share/commix/src/txt/passwords_john.txt \

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add fortune.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.127 fortune.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add helpline.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.132 helpline.htb" >> /etc/hosts