I Hacked Obi Wan Kenobi Today - TryHackMe Hacking Tutorial скачать в хорошем качестве

I Hacked Obi Wan Kenobi Today - TryHackMe Hacking Tutorial

Had to hack Obi Wan Kenobi today. :-D As usual, everything was done on TryHackMe. This is basically a summary of what I did: Nmap: to map out the network and see what ports are open. ---- Found several sensitive ports: 21 (FTP), 22 (SSH), 111 (RPC), 445 (SMB). ---- Nmap scripts were used to enumerate available shares on SMB, as well as some sensitive directories on port 111 which was running rpcbind. SMBClient and SMBGet to find files in the smb shares and download them onto the local machine. In the sensitive directory, we found a log file that had a lot of sensitive information including a username (Kenobi) and an associated security key. Then I used searchsploit to find exploits relative to the FTP version that was running. Which was then used to mount the share directory and download the log file which contained the security key for Kenobi. SSH into Kenobi's desktop using the security key. Once in Kenobi's machine, ran a basic search for all files that had SUID permissions. Several were found and one was usable to gain root access. Got root access! Muahahaha SurfShark (VPN & AntiVirus For Unlimited Devices For $2.20/mo): --- https://bit.ly/SurfShark-FullPlan TryHackMe Discount Link: --- https://bit.ly/TryHackMe-Discount Subscribe to learn more about Penetration Testing & Ethical Hacking. --- https://bit.ly/HankHackerson-YouTube Video Agenda: 01:10 The Tasks At Hand 09:19 TryHackMe Discount Link 09:52 Finding Open Ports (Nmap) 06:44 Enumerating Samba for Shares 26:21 Gain Initial Access With ProFTPd 39:03 Privilege Escalation / PATH Variable Manipulation 52:51 Review Like, Share, & Subscribe to my "ethical" hacker journey. (Emphasis on the ethical :-P) #ethicalhacker #ethicalhacking #hacker #hacking #cybersecurity #securityengineer #securityengineering #networksecurity #cybersecurityengineer #networksecurityengineer #tryhackme #pentest #pentesting #pentester #penetrationtest #penetrationtesting #penetrationtester #howtohack #howtobecomeahacker #smb #servermessageblock #nmap #nfs #networkfilesystem #ftp #filetransferprotocol