IT Systems, Networks, Security and Education
Post-Exploitation Now we’re in, and it’s time to expand our powers. Post-Exploitation in Windows CrackMapExec is our most excellent friend here. It’s a Windows/Active Directory exploration/exploitation tool that lets us walk their domain and machines and do whatever we damn well wanna. And it’s current as of this writing (2018). Here’s a really good walk-through: …
Continue reading “[ Pen Testing ] :: Step by Step: Post-Exploitation”
Exploitation BOF (buffer overflow) Exploits Buffer overflows are pretty technical, but eventually you’ll find yourself using them. In most cases you’ll copy or create code and encode it into a shellcode exploit. Review and correct the initial pre for configurable variables. Pay special attention to removing all badchars. Which characters are bad depends heavily on …
Continue reading “[ Pen Testing ] :: Step by Step: Exploitation”
Enumeration Okay, by now you’ve spent hours, days or weeks stealthily footprinting your scope. Since this is pen testing, you’ve been mighty careful not to exceed your scope, right? So let’s talk tools and techniques. See https://security.stackexchange.com/questions/168247/reduce-noise-when-penetration-testing for an extensive list of tools. LinEnum https://github.com/rebootuser/LinEnum Local Linux Enumeration & Privilege Escalation Cheatsheet: an item-by-item list …
Continue reading “[ Pen Testing ] :: Step by Step: Enumeration”
Reconnaissance In this “passive” phase of a pen test, the tester will be exploring the scope of their pen test contract. This may be an IP range, a domain, a company or anything else with digital assets. In a real pen test, you can’t expect to make a lot of noise and be ignored, not …
Continue reading “[ Pen Testing ] :: Step by Step: Reconnaissance”
Table of Contents [[ This course requires registration. Use the Register link above. We do not share ANY information with ANYBODY. ]]