DC-1: Drupalgeddon2, SUID binary to root shellSo I am going to be starting with this vuln machine. I'd say I'm starting to carve out a methodology with machines like this. First of all, I'll start with a netdiscover to figure out the IP address oOct 5 · 15 min read0xk4m1.hashnode.dev
I_Sniff // MiTM packet takeover using ARP spoofing with a tool I createdSo I'm going to be working on a packet sniffer. It will use ARP spoofing to capture the messages meant for other devices on the network. It will poison both the target and the gateway so that my PC caAug 14 · 9 min read0xk4m1.hashnode.dev
Gaining root access on a vulnerable Linux server using a 20 year old bug / Kioptrix 1 exploitation.Now we're done with enumerating our target and finding out all that we need to know to attack our target and start trying to gain access First of all I need to get the tools I will use to gain root. IJul 20 · 5 min read0xk4m1.hashnode.dev
Scoping out a Linux server / Kioptrix 1 Recon and Enumeration.So this is the initial phase of the Kioptrix hack. Kioptrix Level 1 is an intentionally vulnerable VM I downloaded from VulnHub and ran in VMware. The goal of this machine is simply to get root. I'm lJul 19 · 8 min read0xk4m1.hashnode.dev
ipsweep.sh // A host discovery recon tool on a /24 networkSo I was in the middle of setting up a lab environment and I needed to know which machines on my network were actually alive. I could have just run Nmap for this, but I hadn't built anything yet, and Jul 3 · 4 min read0xk4m1.hashnode.dev
