abankalarm/pentesting

pentesting shortcuts

pen testing

ssh [email protected] -p 1001

basic ssh commands

Apart from starting an SSH session, it is also possible to copy files fromM1toM2and back, by usingM1’s commandline. This is done using thescpcommand. To copy the file/home/bob/grocerylist.txtfrom M2toM1, execute the command scp -P 1001 1.2.3.4:/home/bob/grocery_list.txt ./grocery_list.txt. To copy the file back to theremoteM2, execute: scp -P 1001 ./grocery_list.txt 1.2.3.4:/home/bob/grocery_list.txt.

basic privelege escalation

ls this is because we specified the -a flag, which causeslsto output additional information.

-rw-rw-r--.

•Theownerof the file can... •read it •write to it •-but not execute it

•Thegroupassociated with the file can... •read it •write to it8 •-but not execute it

•Anyoneelsecan... •read the file •-but not write to it •-or execute it

linux file descriptor

Every process in Linux (and Windows, too) has a number which is its process id(pid). This number uniquely identifies the process. The above program, when launched,will display the pid of its own process. Launch the program, then on a different terminalexecute the following command:ls -la /proc//fdwhereshould be replaced with the actual pid that theprocess reported

file decriptor challenge

pawnable.kr read open call c

imp, xxd xxd_demo > xxd_demo.hex

http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet