Collaborate Disseminate
I’m having troubles with ms08_067_netapi.
I have a private network with a web server (10.10.2.10), windows 7 (10.10.2.8) and windows XP (10.10.2.9). I’m hacking from outside the private network with kali (10.0.2.15) the web … Continue reading ms08_067_netapi exploit & pivoting problem
How is it possible to scan the internal network to perform lateral movement without being detected by a firewall? I’m trying to do a decent scan on the internal network for days. I have a meterpreter shell, add subnet, set pr… Continue reading How is it possible to scan the internal network to perform lateral movement without being detected by a firewall?
I am doing an assignment and would like to know if it is possible to enter into an Ubuntu machine with meterpreter. I’ve found one source online that uses the Samba exploit, however, the machine only has ftp and ssh ports ope… Continue reading Enter into an Ubuntu machine with meterpreter [on hold]
How would i be able to pivot into a internal network over the internet (WAN)?
For example: I have a vps with metasploit installed and have a listener running and got a few meterpreter sessions, how would i from there create … Continue reading How do i pivot over WAN
I have access to another client. It can be Windows or *nix from a compromised web server. Then I created a ssh tunnel to my local network.
It works perfectly, but I would like to know if this technique is okay to install imp… Continue reading install implants from pivot network in a silent way / stealth [on hold]
I would like if someone could give me a hand with this tool called crackmapexec. I want to know in those cases of red teaming when we only have one opportunity to pwn all the comapny at the moment to perfect pass the hash cha… Continue reading how can I check if crackmapexec is noisy?
[+] established link to parent beacon: 192.168.1.2
beacon> net view
[*] Tasked beacon to run net view
[+] host called home, sent: 76344 bytes
[+] received output:
List of hosts:
[+] received output:
Server Name … Continue reading About pivoting meterpreter [on hold]
I was recently reading about pivoting but I have doubts
If i route the traffic of the first subnet (using portfw)
to another subnet it will go out with the ip of the second subnet (?)
Having said this if i want to login to… Continue reading Doubt about portfw on pivoting
I am trying to ssh tunnel into this CTF box and this is the command I am using
ssh -L 2020:127.0.0.1:5901 user@196.168.88.47
and to connect to the 2020 socket I use
ssh -p 2020 root@127.0.0.1
when I do that, it gives m… Continue reading SSH tunneling shows no response.
I‘m trying to demonstrate lateral movement to a windows machine that is not directly reachable and should connect back via named pipe:
Windows machine w1 does reverse_tcp/reverse_https to attacker.
w1 adds a named pipe list… Continue reading Metasploit: Lateral movement with named pipe pivot