jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add helpline.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.132 helpline.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add fortune.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.127 fortune.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add hackback.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.128 hackback.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• file
• xxd
• nm
• readelf

Procedure

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add querier.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.125 querier.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add ypuffy.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.121 help.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add ypuffy.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.107 ypuffy.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Port Scan

1. Scan for ports and services

Use nmap to find available TCP ports quickly

jeremypruitt

Techniques

Tools

• nmap
• gobuster OR dirbuster OR dirb
• smbclient

Port Scan

1. Scan for ports and services

jeremypruitt

Techniques

• Port scanning
• Service enumeration
• Wordpress user enumeration
• IMAP commands
• Python coding
• HTTP Proxy: Intercept, modify, repeat

Tools

• nmap