Methodology [ nmap & Metasploit ]

By

 Find Machine


find Machine & OS discovery script

Vulnerability Scan


exploiting using vulnerability scan results (ms17-010)




Post Exploitation




Enable RDP


get hashed login passwords





Comments

Post a Comment

Popular posts from this blog

PLC vs RTU vs IED

By
Image
  Difference Between PLC, RTU, & IED PLCs and RTUs are both electronic devices; their functionalities overlap with each other.  RTCs are sold with PLC-like features, and PLCs are sold with RTC-like features. Many vendors sell proprietary alternatives and different associated environments to run these programs since the industry made the functional language running RTUs and PLCs standard. RTU                                                                                                          “ RTU” stands for “Remote Terminal Units.” They are also referred to as “Remote Telemetry Units.” An RTU is an electronic device which is controlled by a microprocessor. ...
Read more

Rabbit Virus

By
Image
A fork bomb (also called rabbit virus or wabbit) is a denial-of-service attack wherein a process continually replicates itself to deplete available system resources, slowing down or crashing the system due to resource starvation . Understanding   the   above: :() # define ':' -- whenever we say ':', do this: { # beginning of what to do when we say ':' : # load another copy of the ':' function into memory... | # ...and pipe its output to... : # ...another copy of ':' function, which has to be loaded into memory # (therefore, ':|:' simply gets two copies of ':' loaded whenever ':' is called) & # disown the functions -- if the first ':' is killed, # all of the functions that it has started should NOT be auto-killed } # end of what to do when we say ':' ; # Having defined ':', we should now... : # ...call ':...
Read more

HMAC Algorithm

By
Image
  HMAC Algorithm in Computer Network HMAC algorithm   stands for Hashed or Hash based   Message Authentication Code . It is a result of work done on developing a MAC derived from cryptographic hash functions. HMAC is a great resistant towards cryptanalysis attacks as it uses the Hashing concept twice. HMAC consists of twin benefits of Hashing and MAC, and thus is more secure than any other authentication codes. RFC 2104 has issued HMAC, and HMAC has been made compulsory to implement in IP security. The FIPS 198 NIST standard has also issued HMAC. The Hash Function, HMAC is also aimed to be one way, i.e.  easy to generate output from input but complex the other way round. It aims at being less effected by collisions than the hash functions. HMAC reuses the algorithms like MD5 and SHA-1 and checks to replace the embedded hash functions with more secure hash functions, in case found. HMAC tries to handle the Keys in more simple manner. HMAC algorithm – The working of HM...
Read more