PG - Internal Walkthrough
TL ; DR
- Use Nmap to get a list of service running on the target
- Enumerate SMB
- Exploit SMB to get RCE
- No P.E Required
2022¶
PG - ClamAV Walkthrough
TL;DR
- Enumerate SNMP and find traces of
clamav-milter - Exploit
sendmailwhich is vulnerable to RCE
PG - Exfiltrated Walkthrough
TL ; DR
- Use Nmap to get the list of services running on the target.
- On web app use default credentials to login.
- Exploit CMS which is vulnerable to authenticated RCE.
- Exploit Cronjob to escalate privilege to root.
