Skip to content

Instantly share code, notes, and snippets.

View jeremypruitt's full-sized avatar
:octocat:
@ Waabi.ai

Jeremy Pruitt jeremypruitt

:octocat:
@ Waabi.ai
68 followers · 84 following
View GitHub Profile
@jeremypruitt
jeremypruitt / HackTheBox-Help.md
Created June 8, 2019 22:11
Hack The Box - Help

Techniques

Tools

  • nmap

Setup

  1. Add ypuffy.htb to the hosts file so we can refer to the host by name 
    $ echo "10.10.10.121 help.htb" >> /etc/hosts
@jeremypruitt
jeremypruitt / HackTheBox-Irked.md
Created June 5, 2019 06:58
Hack The Box - Irked

Techniques

Tools

  • nmap

Port Scan

  1. Scan for ports and services 
    

    2. 



Use nmap to find available TCP ports quickly



  


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / HackTheBox-Ypuffy.md
            
            

              Last active
              June 5, 2019 21:10
            

              
                Hack The Box - Ypuffy
              
          

        

      

        


      

      

    
Techniques


Tools


    

  • nmap
    • 



Setup


    

  1. Add ypuffy.htb to the hosts file so we can refer to the host by name

    $ echo "10.10.10.107 ypuffy.htb" >> /etc/hosts
    

    2. 




  


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / HackTheBox-Sizzle.md
            
            

              Last active
              June 4, 2019 04:36
            

              
                Hack The Box - Sizzle
              
          

        

      

        


      

      

    
Techniques


Tools


    

  • nmap
    • 

  • gobuster OR dirbuster OR dirb
    • 

  • smbclient
    • 



Port Scan


    

  1. Scan for ports and services
    2. 




  


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / HackTheBox-Chaos.md
            
            

              Last active
              June 2, 2019 20:34
            

              
                Hack The Box - Chaos
              
          

        

      

        


      

      

    
Techniques


    

  • Port scanning
    • 

  • Service enumeration
    • 

  • Wordpress user enumeration
    • 

  • IMAP commands
    • 

  • Python coding
    • 

  • HTTP Proxy: Intercept, modify, repeat
    • 



Tools


    

  • nmap
    • 




  


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / CheatSheet-Pentesting.md
            
            

              Last active
              March 11, 2026 10:14
            

              
                Pentesting Cheatsheet
              
          

        

      

        


      

      

    
Reminders


Remember to log all the things!


    

  • Metasploit - spool /home//.msf3/logs/console.log
    • 

  • Save contents from each terminal!
    • 

  • Linux - script myoutput.txt  # Type exit to stop
    • 



Setup



  


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / assume-role.sh
            
            

              Last active
              March 3, 2025 09:35
            

              
                Shell script to help run Terraform in a Docker container
              
          

        

      

        


      

    
    


        



  


  

        

          
          #!/usr/bin/env bash
        

        

          
          set -e
        

        

          
          set -o pipefail
        

        

          
          

        

        

          
          # FORMATTING ###################################################################
        

        

          
          

        

        

          
          DEFAULT=`tput sgr0`
        

        

          
          BOLD=`tput bold`
        

        

          
          RED=`tput setaf 1`
        

        

          
          GREEN=`tput setaf 2`
        

  





    


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / APIServer.md
            
            

              Last active
              January 31, 2019 08:20
            

              
                CKA Prep Notes
              
          

        

      

        


      

      

    
Intro to API Server


The entire Kubernetes architecture is API driven, so the API server is the center of a Kubernetes cluster. All operations go through the API server, like accesssing data in etcd, accepting kubectl and controller requests, and more.


Get a list of API endpoints in given Kube cluster


$ curl -k https://127.0.0.1:6443/apis


Curl with cert auth





  


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / intro-to-binary.md
            
            

              Created
              October 22, 2018 02:20
            

              
                Intro to Binary
              
          

        

      

        


      

      

    
Lorem ipsum dolor...



  


  





    


          
    

      

        
        

          

              @jeremypruitt
          

          

            
                jeremypruitt
                / kubernetes-vault-auth-client-poc.md
            
            

              Last active
              June 5, 2018 04:03
            

              
                Kuberenetes Vault Auth Client PoC
              
          

        

      

        


      

      

    
KUBERNETES VAULT CLIENT POC WITH LOCAL VAULT AND MINIKUBE


This is a PoC of the kubernetes-vault-client using an instance of Vault running in -dev mode and local instance of minikube. The kubernetes-vault-client tool is run in an init container and uses Vault kubernetes auth to pull secrets from Vault and dump then into a volume that can be mounted in any container in a pod, preferably as an emptyDir with media: Memory. It is meant to be run on a laptop and is used to demonstrate the various configurations necessary to get it working.


Table of Contents



    

  1. Pepare Environment
    2.