HTB - SolidState

-

ssh mindy@10.10.10.51 bash Escape rbash

!! Under Construction !!

Comments

Post a Comment

Popular posts from this blog

Call for Merit and Fairness in CCDC Positions

-
  Trend in CCDC Roster Makeup I’ve noticed a trend in CCDC roster positions. Most of the time on a team women fall into three positions: 1. Team Captain 2. Inject Manager/Policy Writer 3. Alternate Team Size 0-1 women on a team Why do I keep seeing this pattern over and over again? Where are the Firewall, Linux, Windows, Web, IoT, Network and Splunk Admins? Incident Responders? I don’t think every woman wants or asks to be in a leadership role. Are women encouraged into this structure by faculty coaches? Do all the guys on the team want admin positions and women get whatever is leftover? Do faculty coaches trust male ability in technical positions and assign the soft skill side to women on the team? Why am I talking about this? I’m hoping faculty coaches will see this post and rethink how they assign positions. Or they become aware that this is happening. I see the majority of teams meet the criteria up above. How this happens 1. Grandfathering "Since you were th...
Read more

Passing Network+

-
Image
Network+ Review Time I studied for four weeks. I wanted to test on the 14th because it is a lucky number for me. I even took a 2pm time-slot to make it. I prefer mornings over afternoon testing. Cost Exam: $265. Get a voucher from SuperVoucher.com. Much better than paying $399. Boson Practice Test: $80 Dion Practice Test $29. Boson had a higher quality practice exam vs Dion. Strategy I watched Professor Messer videos while making notes on the Exam Topic PDF. Professor Messer is FREE and he FOLLOWS THE PDF to THE T. www.professormesser.com After all these years, its this guy again. I'll be taking my Security+ twice since I let my 2019 edition expire. I learned to NEVER let it EXPIRE AGAIN. Difficulty The Network+ is harder than the Security+. Testing Center DeVore relocated to Macedonia and renamed to TestSpots, LLC. Great location.
Read more

SAMBA Jutsus

-
Image
Samba Jutsus 1. nmap -p 445 --script=smb-enum-shares 10.10.10.123 This will tell you exact paths. If it says C:\etc\Development and its running on Linux, its really /etc/Development. 2. smbmap -H 10.10.10.123 | smbmap -H 10.10.10.123 -r smbmap shows your access privileges. 3. smbclient -L \\10.10.10.123 | smbclient \\\\10.10.10.123\\Development Good old smbclient. 4. Mounting Try to mount if smbclient isn't working. sudo mkdir /media/SMBShare sudo mount //10.10.10.134/Backups /media/SMBShare/ sudo umount -f /media/SMBShare/ 5. nmap -p 139, 445 -script=smb-vuln-* 10.10.10.123 -Pn This nmap script smb-vuln-* is good for finding MS08-067 and EternalBlue.
Read more