Posts

Lin.Security: 1 - VulnHub Box

Image
LinSecurity: 1 VulnHub Box Box Information Name: Lin.Security: 1 Release: 11 JUL 2018 Creator: In.security User Level Difficulty: Easy & Intermediate Root Level Difficulty: Easy & Intermediate Table of Contents Prerequisites Description Enumeration Bob Insecurity Susan Peter Prerequisites The following topics are beneficial in understanding how this box can be exploited. Entry Level Knowledge JOHN THE RIPPER Network File Share (NFS) Scripting SSH-Keygen Description This box primarily focuses on poor System Administration practices. It includes lessons where the user already has access to the box and must privilege escalate. It also includes lessons on gaining user level access remotely. It cover...

Pluck - VulnHub Box

Image
Pluck - VulnHub Box Box Information Name: Pluck - 1 Release: 11 MAR 2017 Creator: Ryan Oberto User Level Difficulty: Easy Root Level Difficulty: Intermediate Prerequisites None Description This box focuses mostly on enumeration. Most of the attack vectors found were due to poor system administration practices present on the box. Finding these vulnerabilities will allow the attack to gain an initial foot-hold. Initial Access is mostly accomplished by the use of scanning tools. There is some understanding how a private and public key pair work, though this will be covered during the wall-through. Privilege Escalation is a bit more complex, using code injection to gain root access; however, no previous coding knowledge will be required to understand & practice this attack. This walk-through will cover how ...