Posts by Year

CMD Line Tool: Commanda I forget

less than 1 minute read

Commands used on Kali Linux 2020 You can use redirect the Standard Error Output from (Generally Display/Screen) to some file and avoid seeing the error mess...

Track Lame

less than 1 minute read

Writeup: Guard

3 minute read

Here are notes from the named target: Target Linux Host name Guard IP 10.10.10.50

Writeup: Base

4 minute read

Here are notes from the named target: Target Linux Host name Base IP 10.10.10.48

Tool: LFI and RFI Info Permalink

less than 1 minute read

File Inclusion

Writeup: Markup

3 minute read

Here are notes from the named target: Target is Windows Host name Markup IP 10.10.10.49

Writeup: Included

6 minute read

Here are notes from the named target: Target is Linux Host name Included IP 10.10.10.55

Tool: MSFVenom Cheatsheet Permalink

less than 1 minute read

A Guide To Venom Shells

Writeup: Pathfinder

8 minute read

Here are notes from the named target:

Tool: Known Passwords cheatsheet

less than 1 minute read

admin : P@s5w0rd! sql_svc : M3g4c0rp123 administrator : MEGACORP_4dm1n!! robert : M3g4C0rpUs3r! ftpuser : mc@F1l3ZilL4 admin : qwerty789 potgres : P@s5w0rd! ...

Writeup: Shield

4 minute read

Here are notes from the named target:

Tool: SQLMap

1 minute read

This is the command string to test if a SQL backed web page is vulnerable to SQL injection:

Tool: HighOn.Coffee cheatsheet Permalink

less than 1 minute read

Penetration testing tools cheat sheet, a quick reference high level overview for typical penetration testing engagements.

Tool: fcrackzip Install Permalink

less than 1 minute read

How To Install fcrackzip On Kali Linux 2017.1 To install fcrackzip just follow these instructions.

Writeup: Vaccine

8 minute read

Here are notes from the named target:

Tool: FTP Automation Commands

less than 1 minute read

FTP is interactive and needs you to supply credentials when prompted you can’t exactly pipe in FTP creds with a command line option, but what you can do is ...

Writeup: Oopsie

7 minute read

Here are notes from the named target:

Tool: Upgrade Terminal

less than 1 minute read

SHELL=/bin/bash script -q /dev/null Ctrl-Z stty raw -echo fg reset xterm Let’s upgrade to a tty shell and continue enumeration. SHELL=/bin/bash script -q ...

Tool: Web Dir Search Permalink

less than 1 minute read

Dirsearch - Web path scanner Build License Release Stars Tweet

Tool: PHP Reverse Shell Permalink

less than 1 minute read

This tool is designed for those situations during a pentest where you have upload access to a webserver that’s running PHP. Upload this script to somewhere ...

Tool: Linux PE GotMilk Permalink

less than 1 minute read

A Guide To Linux Privilege Escalation sudo /usr/bin/find /etc -exec /bin/bash \;

Writeup: Archetype

3 minute read

Here are notes from the named target:

Tool: Transferring files between linux and Windows Permalink

less than 1 minute read

Often times on an engagement I find myself needing to copy a tool or a payload from my Kali linux attack box to a compromised Windows machine.

Tool: Using CURL to Download Permalink

less than 1 minute read

How to download files straight from the command-line interface

Signed up for Hack The Box

1 minute read

I signed up for Hack the Box last night. In order to get an invite code from them youfirst have to hack the site Index page. to do this you have to do severa...

Enumeration Tool: Impackets Install

less than 1 minute read

Installing Impacket on Kali Linux 2020 Here are my notes to make a successful install of Impacket on Kali Linux version 2020. These were taken from tryhackm...

Enumeration: NMAP Commands

3 minute read

Here are some Nmap usage examples, from the simple and routine to a little more complex and esoteric. Some actual IP addresses and domain names are used to m...