enumeration # Simple whois scan whois $domain # DNS records dig $domain +short # A records -> DNS IP lookup dig $domain -t mx +short # MAIL records dig $domain -t ns +short # NS, CNAME ...

enumeration # enumerate users nmap --script smtp-enum-users $IP -oN recon/nmap.smtp_users # allowed commands nmap -p25 --script smtp-commands $IP -oN recon/nmap.smtp_comm

brute force hydra -l username -P ~/Documents/rockyou.txt ssh://$IP enumeration nmap -n -sV -Pn --script "*telnet* and safe" -p 23 $IP -oN recon/nmap.telnet

login # simple login ssh username@$IP # login with rsa key chmod 600 id_rsa ssh username@$IP -i id_rsa simple scan nmap -sV $IP -p 22 # weak keys nmap $IP--script ssh-hostkey --sc...

login ftp $IP ftp user@$IP # deafult credentials --> anonymous:anonymous brute force hydra -l -I <username> -P ~/Documents/rockyou.txt ftp://$IP enumeration ...

list SMB shares nmap --script "safe or smb-enum-*" -p 139,445 $IP -oN recon/nmap.smb_enum smbmap -H return.local -u svc-printer -p "1edFg43012\!\!" -r enumeration enum4linux -avA ...

Blogs Trellix The DFIR Report Akamai Blog SOC Prime Platform Cisco Talos

This is a test

eJPT stands for Junior Penetration Tester. This certification is an excellent starting point for anyone aspiring to become a Penetration Tester. I recently earned this certification and would like ...