Search for a command to run...
Series
This is a series of writeups for vulnerable machines that I hacked while preparing for the OSCP (Offensive Security Certified Professional). OSCP defacto is the standard among pentesters
Introduction The OSCP (Offensive Security Certified Professional) also, known as PWK (Penetration Testing with Kali Linux) certificate is something that I was afraid of, but at the same time wanted so badly for a very long time. When I just started m...
Introduction What is a Buffer Overflow? In information security and programming, a buffer overflow, or buffer overrun, is an anomaly where a program, while writing data to a buffer, overruns the buffer’s boundary and overwrites adjacent memory loca...
Tabby is an easy Linux machine from HackTheBox, that is part of the pool of machines that are recommended for preparation for OSCP certification. Enumeration Start with nmap scan: nmap -sC -sV 10.10.10.194 Starting Nmap 7.80 ( https://nmap.org ) at 2...
Internal is the last machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. Enumeration As I’m starting to prepare for my “Dry run” for the OSCP exam, this time I will use more stuff from my methodology. We already le...
Relevant is the eighth machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. Enumeration Nmap scan result: nmap -sC -sV -o nmap.txt <target_ip> 80/tcp open http Microsoft IIS httpd 10.0 135/tcp open ms...
Skynet is the fifth machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path Enumeration Let’s start with the nmap scan: nmap -sC -sV -o nmap.txt <target_ip> 22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.8 80...
