Collaborate Disseminate
I’m creating a little sandbox environment for me to play around with using VirtualBox. I am using the latest Kali machine as the ‘attacker’.
Right now, I have a Ubuntu machine (20.04.1) that is susceptible to LFI on its web page. Based on … Continue reading RDP with Kali through pivoting
I have the following proxychains.conf
[…]
[ProxyList]
# add proxy here …
# meanwile
# defaults set to "tor"
#socks4 127.0.0.1 9050
# <ip_prox_1>
http 10.10.10.100 3128
# the loopback interface of ip_prox_1
htt… Continue reading call http-webpage in local browser, where the webserver is only reachable through proxychains (as it sits in a different network)
i have this lab setup
kali => 192.168.1.81 => windows10(10.10.10.130) => Metasploitable(10.10.10.149)
i hacked windows 10 first then i make a pivot via ssf tools :
ssf.exe -g -F 22222 -L 10.10.10.130:3333:192.168.1.81:3333 -L
10…. Continue reading how to reach the port 80 from a pivot mahcine
I have an exam next week. I need help.
This is my lab:
attacker machine (kali) : 192.168.1.81
1st hacked machine (Windows 10) : 10.10.10.130
target (Windows 7) : 10.10.10.135 (have an MS17-010 exploit)
Steps I foll… Continue reading pivoting without metasploit to get reverse shell
I have a compromised linux host with meterpreter session running as root on IP 10.10.10.10. The route to 10.10.10.0/24 and 11.11.11.024 have been added to the session.
I have new victim on 11.11.11.11 that I compromise with buffer overflow… Continue reading Meterpreter session not listening on correct port [closed]
I’m getting started learning pentesting and I came across this situation.
Privilege Escalation
Running WinPeas I noticed a change to escalation bypass UAC. I was thinking to use a local exploit (Kali) with Chisel forwarding this traffic … Continue reading How to use Chisel for Port Forwarding?
I have a pivot setup on a compromised windows 10 box and am trying to get an SYSTEM shell on a separate machine in the target network. I have successfully done this abusing an unquoted service path via a meterpreter/reverse_named_pipe that… Continue reading Meterpreter pivot with a bind_named_pipe
I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website hosted on 10.10.10.10 I am able to gain… Continue reading Help understanding pivoting and port forwading
I’m having troubles with ms08_067_netapi.
I have a private network with a web server (10.10.2.10), windows 7 (10.10.2.8) and windows XP (10.10.2.9). I’m hacking from outside the private network with kali (10.0.2.15) the web … Continue reading ms08_067_netapi exploit & pivoting problem
How is it possible to scan the internal network to perform lateral movement without being detected by a firewall? I’m trying to do a decent scan on the internal network for days. I have a meterpreter shell, add subnet, set pr… Continue reading How is it possible to scan the internal network to perform lateral movement without being detected by a firewall?