Began archiving things for HTB enumeration

pull/12/head
John Hammond 2019-06-22 13:05:11 -04:00
parent 81af5e81e7
commit 442e6acc69
1 changed files with 89 additions and 1 deletions

View File

@ -13,6 +13,67 @@ Hopefully, at some point I will develop software that will run through a lot of
--------------- ---------------
Port Enumeration
====================
445 (smb/Samba)
-----------------------
* `smbmap`
To try and list shares as the anonymous use **DO THIS** (this doesn't always work for some weird reason)
```
smbmap -H 10.10.10.125 -u anonymous
```
Or you can attempt just:
```
smbmap -H 10.10.10.125
```
And you can specify a domain like so:
```
smbmap -H 10.10.10.125 -u anonymous -D HTB.LOCAL
```
Worth trying `localhost` as a domain, if that gets "NO_LOGON_SERVERS"
```
smbmap -H 10.10.10.125 -u anonymous -D localhost
```
* `enum4linux`
```
enum4linux 10.10.10.125
```
* `smbclient`
```
smbclient -N -L //10.10.10.125/
```
SNMP
=======================
* snmp-check
```
snmp-check 10.10.10.125
```
Known Exploits Known Exploits
------------------ ------------------
@ -879,7 +940,12 @@ VisualBasicScript Reversing
Miscellaneous Miscellaneous
---------- ----------
* GameBiy ROMS * Punchcards
Sometimes it sucks to do these manually, but you can here: [http://tyleregeto.com/article/punch-card-emulator](http://tyleregeto.com/article/punch-card-emulator)
* GameBoy ROMS
You have options to run GameBoy ROMs... one is using VisualBoyAdvance, the oher is RetroArch (which is supposedly better): You have options to run GameBoy ROMs... one is using VisualBoyAdvance, the oher is RetroArch (which is supposedly better):
@ -1027,6 +1093,28 @@ Sometimes you're jailed in an environment where you can potentially execute code
`().__class__.__base__.__subclasses__()` - Gives access to `object` subclasses `().__class__.__base__.__subclasses__()` - Gives access to `object` subclasses
Trivia
-------------
* The British used this machine to crack the German Enigma machine messages.
```
Bombe
```
* What is the Windows LM hash for a blank password?
```
aad3b435b51404eeaad3b435b51404ee
```
* for Windows LM hashing, after the password is split into two 7 character chunks, they are used as DES keys to encrypt what string?
```
KGS!@#$%
```
[steghide]: http://steghide.sourceforge.net/ [steghide]: http://steghide.sourceforge.net/
[snow]: http://www.darkside.com.au/snow/ [snow]: http://www.darkside.com.au/snow/