Скачать или смотреть VulNyx: Fing - Finger User Enum and Doas / Find Command Hack

0:00 Start
0:33 Initial scans
3:58 The Finger protocol
5:28 How to test Finger
6:27 Finger user enumeration
13:28 Brute forcing SSH login
15:56 Initial access using SSH
17:10 Searching for SUID binaries
19:55 Doas command explanation
21:18 Privilege escalation - Sudo Find
22:18 Combining Doas and sudo Find
23:14 We are root
23:26 Wrap-up

You can download the challenge VM from the following link:
https://vulnyx.com/#fing

Download the file, then unzip the file and deploy the VM using VirtualBox or VMware. You will also need to have an "attacker" VM with security tools installed on it, e.g., Kali Linux, deployed to the same VM network.

The links mentioned in this walkthrough can be found below:
HackTricks - Pentesting Finger:
https://book.hacktricks.xyz/network-s...
Pentestmonkey - Finger User Enum script:
https://pentestmonkey.net/tools/user-...

HackerFrogs Links:
Twitch:
  / theshyhat  
Kick:
https://kick.com/theshyhat
Reddit:
  / hackerfrogs