CCyberSphereincybersphere.hashnode.dev·Dec 31, 2023 · 7 min readCMesS — TryHackMeThis is a really great medium-level box that involves enumerating subdomains and discovering sensitive information on /dev, including the email and password for the Gila CMS admin user. Utilizing these credentials, one can log in via /login. Once ins...00
CCyberSphereincybersphere.hashnode.dev·Dec 31, 2023 · 5 min readHackTheBox - BrokerEnumeration First I scanned for all ports on the machine and saved the output as grep format. It's much faster to scan for all ports on the box before doing the version and script scan. sudo nmap -p- --min-rate=5000 -oG broker 10.10.11.243 --vv I us...00
CCyberSphereincybersphere.hashnode.dev·Dec 31, 2023 · 3 min readHackTheBox -TopologyEnumeration: sudo nmap -sS -sV -sC -T4 --min-rate 5000 10.10.11.217 -vv Scanning topology.htb (10.10.11.217) [1000 ports] Discovered open port 22/tcp on 10.10.11.217 Discovered open port 80/tcp on 10.10.11.217 Completed SYN Stealth Scan at 18:40, 0.4...00
CCyberSphereincybersphere.hashnode.dev·Dec 31, 2023 · 9 min readSteel MountainScanning We'll start with scanning. First thing First we need to scan the target machine for open ports by using nmap ┌─[root@parrot]─[~] └──╼ sudo nmap -sS -sV -sC -T4 10.10.81.243 -vv . . . Host is up, received echo-reply ttl 127 (0.14s latency). ...00
CCyberSphereincybersphere.hashnode.dev·Dec 31, 2023 · 2 min readRootMe walkthrough — NotesReconnaissance sudo nmap -sS -sV -sC --min-rate 5000 -T4 10.10.133.96 -vv PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 63 OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 2048 4ab9160884...00