┌──(root💀kali)-[/home/kali/Downloads] └─# nmap -sV -v -p- –min-rate=10000 10.10.10.224 http://10.10.10.224:3128/ By above we get j.nakazawa@realcorp.htbsrv01.realcorp.htb (squid/4.11) ┌──(root💀kali)-[/home/…/Downloads/SecLists/Discovery/DNS] └─# dnsenum –threads 64...

┌──(root💀kali)-[/home/kali/Downloads] └─# nmap 10.10.10.233 http://10.10.10.233/ Let’s check if we can work a way around the login page! Exploring, I found...

┌──(rootkali)-[/home/kali/Downloads] └─# nmap -A 10.10.11.100 ┌──(rootkali)-[/home/kali/Downloads] └─# dirb http://10.10.11.100/ http://10.10.11.100/resources/ http://10.10.11.100/resources/README.txt ┌──(rootkali)-[/home/kali/Downloads] └─# dirb http://10.10.11.100/ -X .php http://10.10.11.100/portal.php Since it...

┌──(rootkali)-[/home/kali/Downloads] └─# nmap -A 10.10.10.246 http://10.10.10.246:8080/ ┌──(rootkali)-[/home/kali/Downloads] └─# gobuster dir -u http://10.10.10.246:8080/ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 50 -x .php,txt http://10.10.10.246:8080/robots.txt http://10.10.10.246:8080/vpn/...

┌──(rootkali)-[/home/kali/Downloads] └─# nmap -A -v -T4 -Pn 10.10.11.101 ┌──(rootkali)-[/home/kali/Downloads] └─# echo 10.10.11.101 writer.htb > /etc/hosts http://writer.htb/ ┌──(rootkali)-[/home/kali/Downloads] └─# wfuzz -w...

┌──(root㉿kali)-[/home/kali/Downloads] └─# nmap -sV -T4 -Pn 10.10.11.126 http://10.10.11.126/ By searching a bit you can find a lot of forms, file...

┌──(rootkali)-[/home/kali/Downloads] └─# nmap -sC -sV 10.129.95.232 ┌──(rootkali)-[/home/kali/Downloads] └─# mysql -h 10.129.95.232 -u root MariaDB [(none)]> show databases; MariaDB [(none)]> use...

┌──(rootkali)-[/home/kali/Downloads] └─# nmap -sV 10.129.29.199  ┌──(rootkali)-[/home/kali/Downloads] └─# ftp 10.129.29.199 ┌──(rootkali)-[/home/kali/Downloads] └─# gobuster dir –url http://10.129.29.199 -w /usr/share/wordlists/dirbuster/directory-list-2.3-small.txt -x php,html http://10.129.29.199/login.php