Development of Xiaoanpai series: AIPI-SCP-4.3 environment construction

Write in front: reference tutorial Building Xiaoanpai Windows development environment from scratch – Xiaoanpai S1 tutorial collection – Internet of Things developer community – Anxinke Forum – Powered by Discuz! (ai-thinker.com) Thanks to Xiaoan for sending AIPI-SCP-3.4. It’s a very cool board. Below are the notes on setting up the environment. Git tool installation: Mainly […]

OSCP recommended shooting range-FristiLeaks

1. Environment deployment After downloading, you need to change the MAC address of the target machine. 2. Scan network segments #Scan ip connections within the LAN sudo arp-scan -l #Scan which IPs in this network segment are open nmap -sn 192.168.23.1/24 -r –min-rate 255 You can see that this is the IP address of the […]

OSCP Series Shooting Range-Esay-SunsetDecoy

Summary getwebshell: Found the zip file → zip has a password → john exploded the zip password → Found passwd and shadow files → Exploded shadow password → ssh login Right escalation idea: Discover background running programs → Upload pspy64 for viewing → Discover chkrootkit → chkrootkit Elevate privileges Preparation Start VPN Obtain the attacking […]

OSCP series shooting range-Esay-Gaara nanny level

OSCP series shooting range-Esay-Gaara Directory OSCP series shooting range-Esay-Gaara Summarize Preparation Information collection-port scanning Target open port collection Target port corresponding service detection Information collection-port testing 22-SSH port information collection 22-SSH port version information and MSF utilization 22-Login methods supported by SSH protocol 22-SSH weak password blasting (to be determined) 22-SSH manual login attempt (none) […]

OSCP series shooting range-Esay-Moneybox nanny level

OSCP Series Shooting Range-Esay-Moneybox Directory OSCP series shooting range-Esay-Moneybox Summarize Preparation Information collection-port scanning Target open port collection Target port corresponding service detection Information collection-port testing 21-FTP port information collection 21-FTP version version information 21-FTP port anonymous login test (exists) 21-FTP port-File GET collection 21-FTP port-PUT upload test 22-SSH port information collection 22-SSH port version […]

OSCP series shooting range-Esay-Monitoring nanny level

OSCP series penetration-Esay-Monitoring Directory OSCP series penetration-Esay-Monitoring Summarize Preparation Information collection-port scanning Target open port collection Target port corresponding service detection Information collection-port testing 22-SSH port information collection 22-SSH port version information and MSF utilization 22-Login methods supported by SSH protocol 22-SSH manual login attempt (none) 22-SSH weak password blasting (wait quietly) 25-SMTP port (to […]

OSCP Range Series – LFI Bypassing Assertion – Assertion101

OSCP series shooting range-Intermediate-Assertion101 Directory OSCP Series Shooting Range-Intermediate-Assertion101 Summarize Preparation Information collection-port scanning Target open port collection Target port corresponding service detection Information collection-port testing 22-SSH port information collection 22-SSH port version information and MSF utilization 22-Login methods supported by SSH protocol 22-SSH manual login attempt (none) 22-SSH weak password blasting (wait quietly) 80-HTTP […]

OSCP target machine—-OnSystemShellDredd

From WEB to intranet & amp; & amp;FTP anonymous & amp; & amp;SSH key login & amp; & amp;SUID privilege escalation Today I will shoot an OSCP target machine with medium difficulty, including port detection, service detection, FTP anonymous login, ssh key login, suid privilege escalation, etc… The shooting range is of medium difficulty and […]

Scheduled tasks ssh scp

One-time dispatch at Syntax: at at 1:00 at 3am at 4pm at 16:00 at 20:00 at now + 5min at 8:00 2023-10-01 Exit ctrl + d View one-time tasks atq Delete one-time tasks atrm id View specific planned tasks # cd /etc/spool/at # at 4pm at 12:30 + 3[day|min|hour|month|year|week] at 4pm 2023-09-03 Batch one-time scheduled […]