Recon First thing i always do is run this curl -s 10.10.11.229 -v 2>&1 | grep "Location" to get the host name, in this case it is we got nothing. Nmap ❯ nmap -sC -sV 10.10.11.229 Startin...

Recon curl -s 10.10.11.230 -v 2>&1 | grep "Location" | awk '{print $3}' http://cozyhosting.htb we got cozyhosting.htb as the host, now lets edit out /etc/hosts to resolve the host echo ...

Setup Always make sure to connect openvpn with the following command: sudo openvpn --config <file.ovpn> The next step is exporting the ip address of the machine. This is done by running the...

enumeration nmap 10.10.193.163 -sCV -T4 130 ⨯ Starting Nmap 7.91 ( https://nmap.org ) at 2022-05-21 00:20 EDT Nmap sc...

Exporting the ip, hate typing it over again. import ip=10.10.106.83 Enumeration We got 2 open port, 22(ssh), 80(apache). fair enough lets see whats in 80 PORT STATE SERVICE 22/tcp open ssh ...

Task 1. Introduction Component Domain Controllers Forests, Trees, Domains Users + Groups Trusts Policies Domain Services Why use it? it allows everyone to basically login to any...

Enumeration export ip=10.10.188.83 nmap -sCV $ip Starting Nmap 7.60 ( https://nmap.org ) at 2022-05-18 03:25 BST Nmap scan report for ip-10-10-188-83.eu-west-1.compute.internal (10.10.188.83) Ho...

export ip=10.10.2.234 nmap basic nmap $ip PORT STATE SERVICE 22/tcp open ssh 53/tcp open domain 8009/tcp open ajp13 8080/tcp open http-proxy MAC Address: 02:D6:2B:FE:BC:A9 (Unknown) ...

export ip=10.10.98.110 nmap -$ip Starting Nmap 7.60 ( https://nmap.org ) at 2022-04-03 11:23 BST Nmap scan report for ip-10-10-98-110.eu-west-1.compute.internal (10.10.98.110) Host is up (0.0015s l...

Official room link We first make a variable to hold our assign ip export ip=10.10.62.114 Nmap result nmap -sC -sV $ip Starting Nmap 7.60 ( https://nmap.org ) at 2022-02-13 10:30 GMT Nmap scan re...