Command Dictionary

Use port 443 if port 80 is blocked for running a Python server and a netcat listener.

Use port 443 if port 80 is blocked for running a Python server and a netcat listener.

The given target is 192.168.186.23. Recon reveals open ports and services including SSH and HTTP. Dirbuster identifies directories. The main site has an admin login page. Using a hydra command, admin:admin login credentials are found. A search for exploits leads to an arbitrary file upload to RCE vulnerability. A shell is obtained. Privilege escalation is performed by upgrading the shell, running linpeas, and finding the root password. Access is gained as root. Proof.txt contains the proof.

The target IP is 192.168.183.187, a Windows system. The reconnaissance reveals open ports, including domain, HTTP, kerberos-sec, msrpc, netbios-ssn, ldap, microsoft-ds, kpasswd5, ncacn_http, tcpwrapped, and HTTPAPI. The web application on the IP is Apache with Bootstrap and PHP. Nikto scan suggests potential vulnerabilities. Directory enumeration using Dirbuster and Gobuster identifies several directories.

Scanning for targets on subnet using Nmap and HTTP enumeration tools such as gobuster and dirbuster to find open ports and directories. Discovered an open SSH port and an Apache HTTP server. Detected Linux OS. Used dirbuster to search for directories and found a CGI vulnerability called shellshock. Confirmed vulnerability with nikto.

Performed a reconnaissance on the target IP address, identified open ports and services, checked for potential vulnerabilities, discovered a website with CCTV mentioned, found accessible management logs, and extracted unique commands from the logs.