BasicPentesting1 VM WalkThrough from VulnHub

VM : BasicPentesting1

Download Link : https://www.vulnhub.com/entry/basic-pentesting-1,216/

Start the VM and get the IP of VM :

 $ nmap -sP 192.168.1.0/24 
 
 Nmap scan report for 192.168.1.1
 Host is up (0.00060s latency).
 Nmap scan report for 192.168.1.2
 Host is up (0.000024s latency).
 Nmap scan report for 192.168.1.3
 Host is up (0.0014s latency).
 Nmap scan report for 192.168.1.9
 Host is up (0.11s latency).
 Nmap scan report for 192.168.1.10
 Host is up (0.0015s latency).
 Nmap scan report for 192.168.1.15
 Host is up (0.0012s latency).
 Nmap scan report for 192.168.1.100
 Host is up (0.00080s latency).

At above list 192.168.1.15 is our VM ip address. At above list 192.168.1.15 is our VM ip address.

Read more »

Curl for Web Hacking and Pentesting

In the previous post we saw the basic uses of curl. Now at this we are going to see some useful and important command as web pentesting view.

1. Get the HTTP response header

We can get header information of a website with '-I' flag

 curl -I http://www.w3.org

2. Sending GET Requests

 curl "http://www.testserver.com/example.php?name=hacke&age=30"

3. Sending POST requests 

 curl -d "name=ajay&submit=Submit" http://www.testserver.com/example.php

4. To follow a redirect location:

 curl -L http://www.testserver.com

5. Sending custom Headers : 

 curl -H "user-agent:Mozilla/5.0 (X11; Linux x86_64) " http://www.testserver.com

 curl -H "Content-Type: text/xml" http://www.testserver.com

 curl -H "Host: www.unknownsite.com" http://www.testserver.com

6. Custom User-Agent Header :

We can send custom user agent header by '-A' flag

 curl -A "Mozilla/5.0 (X11; Linux x86_64)" http://www.testserver.com

 curl -A "Mozilla/5.0 (compatible;  Windows NT 5.0)" http://www.testserver.com

7. Custom Referrer field :

 curl -e http://referersite.com http://www.testserver.com

Or we can also send custom referrer with below command

 curl -H "Referrer: http://referersite.com"  http://www.testserver.com

8. Custom Cookies : 

To send custom cookies use '-b' flag

 curl -b "name=sectree" http://www.testserver.com

To store response cookies in a file use '-c' option. We can also send cookies which is stored in a file.

 curl -b current_cookies.txt -c new_cookies.txt http://www.testserver.com

where the current_cookies.txt are being sent to the web server and new_cookies.txt are response cookies by the server which is stored and written in that file.

Read more »

Wfuzz : How to install, Configure and start with wfuzz in linux based systems (Ubuntu)

Wfuzz is a Python-based flexible web application bruteforcer that can be considered an alternative to Burp Intruder as they both have some common features. It supports various methods and techniques to expose web application vulnerabilities. With Wfuzz we can audit parameters, authentication, forms with brute-forcing GET and POST parameters, cookies, forms, discover unlinked resources such as directories/files, headers and so on.

Read more »

Exploiting Metasploitable : Metasploitable2 Walkthrough Part 1

Metasploitable IP      :   192.168.56.101
Attacker Machine IP :   192.168.56.1

Now starting with nmap Scan :

Read more »

Setting up Metasploitable2 (Linux) VM on VirtualBox

The Metasploitable virtual machine is an intentionally vulnerable version of Ubuntu Linux designed for testing security tools and demonstrating common vulnerabilities. First download metasploitable2 VM from here :

Read more »