Скачать или смотреть Kenobi - TryHackMe Walkthrough

Introduction:-
Walkthrough on exploiting a Linux machine. Enumerate Samba for shares, manipulate a vulnerable version of proftpd and escalate your privileges with path variable manipulation.
#Network_Pentesting

Chapters

0:00 - Room Introduction
1:05 - Nmap - Network Scan
2:51 - SAMBA - Smb Enumeration
7:57 - enum4linux - Remote Linux Enumeration
11:44 - smbclient & smbget - For Public Share Access
14:27 - Extracted File Analysis
16:32 - SearchSploit - ProFtpD Exploit Search & Selection
19:43 - RpcBind - Enumeration of RPCbind, Port 111,2049
24:38 - Share Mount - Local system mounting of remote share
28:16 - Netcat - For ProFtpd Exploitation (File Copy/Paste)
31:41 - Remote Access - SSH using private RSA key
33:40 - LinPEAS - Linux Enumeration
37:06 - Http.server - File Upload/Download on victim
39:08 - Privilege Escalation - Using Unknown SUID binary
44:56 - Root Access

Tasks:-
1. Port Scanning
2. Service Enumeration (Rpc (Remote Procedure Call), SMB(Server Message Block), NFS(Network File Share) )
3. Gaining access using FTP exploit, RPC shared directory and ssh via private key
4. Privilege escalation with Path Variable Manipulation, SUID bit vulnerability and linpeas.sh script

Tools Used:-
#nmap
#Nmap_Scripting_Engine #NSE
#enum4linux
#smbclient
#smbget
#ftp
#searchsploit
#netcat
#Linpeas
#ssh

URL
https://tryhackme.com/room/kenobi