tryhackme writeups cc pentesting | CC: Pen Testing cc pentesting tryhackme |hackersadda | hackeradd

cc pentesting tryhackme | tryhackme writeups cc pentesting | cc pentesting | tryhackme writeup
https://tryhackme.com/room/ccpentesting
Hackers Adda
hackersadda
hacker adda
hackeradda
How do you specify which port(s) to scan?
How do you do a "ping scan"(just tests if the host(s) is up)?
What is the flag for a UDP scan?
How do you run default scripts?
How do you enable "aggressive mode"(Enables OS detection, version detection, script scanning, and traceroute)
What flag enables OS detection
How do you get the versions of services running on the target machine
How many ports are open on the machine?
What service is running on the machine?
What is the version of the service?
What is the output of the http-title script(included in default scripts)
How do you listen for connections?
How do you enable verbose mode(allows you to see who connected to you
How do you specify a port to listen on
How do you specify which program to execute after you connect to a host(One of the most infamous)?
How do you connect to udp ports
How do you specify directory/file brute forcing mode?
How do you specify dns bruteforcing mode?What flag sets extensions to be used?
Example: if the php extension is set, and the word is "admin" then gobuster will test admin.php against the webserver
What flag sets a wordlist to be used?
How do you set the Username for basic authentication(If the directory requires a username/password)?
How do you set the password for basic authentication?
How do you set which status codes gobuster will interpret as valid?
How do you skip ssl certificate verification?
How do you specify a User-Agent?
How do you specify a HTTP header?
What flag sets the URL to bruteforce?
What is the name of the hidden directory
What is the name of the hidden file with the extension xxa
How do you specify which host to use?
What flag disables ssl?
How do you force ssl?
How do you specify authentication(username + pass)?
How do you select which plugin to use?
Which plugin checks if you can enumerate apache users?
How do you update the plugin list
How do you list all possible plugins to use
What command allows you to search modules?
How to you select a module?
How do you display information about a specific module?
How do you list options that you can set?
What command lets you view advanced options for a specific module?
How do you show options in a specific category
How do you select the eternalblue module?
What option allows you to select the target host(s)?
How do you set the target port?
What command allows you to set options?
How would you set SMBPass to "username"?
How would you set the SMBUser to "password"?
What option sets the architecture to be exploited?
What option sets the payload to be sent to the target machine?
Once you've finished setting all the required options, how do you run the exploit?
What flag do you set if you want the exploit to run in the background?
How do you list all current sessions?
What flag allows you to go into interactive mode with a session("drops you either into a meterpreter or regular shell")
What command allows you to download files from the machine?
What command allows you to upload files to the machine?
How do you list all running processes?
How do you change processes on the victim host(Ideally it will allow you to change users and gain the perms associated with that user)What command lists files in the current directory on the remote machine?
How do you execute a command on the remote host?
What command starts an interactive shell on the remote host?
How do you find files on the target host(Similar function to the linux command "find")
How do you get the output of a file on the remote host?
How do you put a meterpreter shell into "background mode"(allows you to run other msf modules while also keeping the meterpreter shell as a session)?
What variable do you need to set, to select the remote host
How do you set the port to 80
Crack This Hash:56ab24c15b72a457069c5ea42fcfc640 Type: MD5
Crack this hash: 4bc9ae2b9236c2ad02d81491dcb51d5f Type: MD4
What flag let's you specify which wordlist to use?
Crack this hash:
5d41402abc4b2a76b9719d911017c592
What flag sets which database is in the target host's backend?(Example: If the flag is set to mysql then sqlmap will only test mysql injections).
How do you select the level of depth sqlmap should use(Higher = more accurate and more tests in general).
How do you dump the table entries of the database?
How do you ask sqlmap to try to get an interactive os-shell?
What flag dumps all data from every table
Given the username "admin", the password "password", and the ip "10.10.10.10", how would you run ipconfig on that machine
While in the interactive prompt, how would you download the file test, assuming it was in the current directory?
In the interactive prompt, how would you upload your /etc/hosts file
How do you specify which domain(workgroup) to use when connecting to the host?
How do you specify the ip address of the host?