Introduction: This is a extremely simple machine based on a very old CVE (2007-2447) with SMB service and the exploit for this vulnerability is readily available at - https://www.exploit-db.com/exploits/16320/ . You can either do this machine with the metasploit module but since OffSec discourages the use of this in …

Read More

Introduction: Recon 1# nmap -sS -sC -sV -T4 -oN nmap.legacy.txt 10.10.10.4 2Starting Nmap 7.91 ( https://nmap.org ) at 2020-12-22 12:13 EST 3Nmap scan report for 10.10.10.4 4Host is up (0.012s latency). 5All 1000 scanned ports on 10.10.10.4 are filtered 6 7Service detection performed. Please report any incorrect …

Read More

Recon Lets kick off the Nmap scan. 1$ nmap -A -T4 -oN skynet.nmap.txt 10.10.0.50 2Starting Nmap 7.80 ( https://nmap.org ) at 2020-09-26 14:28 EDT 3Nmap scan report for 10.10.0.50 4Host is up (0.081s latency). 5Not shown: 994 closed ports 6PORT STATE SERVICE VERSION 722/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.8 …

Read More