Enumerating information on the network such as hostnames and IP addresses. Create a file called test.txt and a file called ignore.txt. For legal reasons, ignore.txt should never be tested.
Footprinting: Enumerating information with no knowledge about system.
https://github.com/r3dy/capsulecorp-pentest
Pingsweep:
for octet in {1..254}; do ping -c 1 192.168.8.$octet -W 1 >> pingsweep.txt & done
cat pingsweep.txt | grep “bytes from” |cut -d “ “ -f4 |cut -d “:” -f1 > targets.txt
cat targets.txt
Information gathering tools: nmap (software name and version number, current patch and configuration settings, service banners and http headers, authentication mechanisms). Metasploit CrackMapExec (CME).
Focused penetration: Web (php) shells uploaded to an apache2 server
Privilege escalation: Cracking administrator login credential
Documentation:
Note: OWAP can be used.
Sudo apt update -y; sudo apt upgrade -y; sudo apt install -y open-vm-tools; sudo apt install -y open-vm-tools-desktop; sudo apt install -y openssh-client; sudo apt install -y openssh-server; sudo apt install -y python-pip; sud apt install -y net-tools;
sudo apt install vim curl tmux medusa libssl-dev libffi-dev python-dev build-essential net-tools -y; sudo apt install -y crackmapexec; pip install crackmapexec;
sudo apt install -y nmap; sudo apt install -y git wget build-essential checkinstall libpcre3-dev libssl dev libpcap-dev; sudo apt install ruby
An internal network penetration test will include mapping the network, compromising vulnerable services, elevating user rights to administrators, and gathering evidence.
A pentest report includes how the network was breached, how the security controls were bypassed, and what the company can do to identify these gaps. It takes 40 hours to create this report.
(Pages 1-7).
The tool used on the laptop to breach the wireless access point is called. Once used against the jeremiahoneal wireless access point, it was determined that the password was XXXX
