https://bl4ck574r.github.io/Blackstar's blogBlackstar's blog 2024-09-19T12:55:47+05:30 Blackstar https://bl4ck574r.github.io/ Jekyll © 2024 Blackstar /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Quotient2022-09-26T00:00:00+05:30 2022-09-26T00:00:00+05:30 https://bl4ck574r.github.io/posts/Quotient/ Blackstar Room about exploiting Unquoted Path vulnerability. We were provided with the username and the password to login: sage: gr33ntHEphgK2&V Using xfreerdp, we can get RDP session on the box. xfreerdp /u:sage /p:<pass> /v:<target_ip> Basic Enumeration First thing first, we’ll look at all the users on the box. We only have two accounts, Administrator and sage. Next, we’ll look a... Vulnet Node2022-09-13T02:30:00+05:30 2022-09-13T02:30:00+05:30 https://bl4ck574r.github.io/posts/VULNET-Node/ Blackstar ENUMERATION Lets start with port scan. Nmap scan report for 10.10.94.18 Host is up (0.23s latency). PORT STATE SERVICE VERSION 8080/tcp open http Node.js Express framework |_http-open-proxy: Proxy might be redirecting requests |_http-title: VulnNet &ndash; Your reliable news source &ndash; Try Now! We have only one port open which is running nodejs. We can also verify this b... Vulnet Internal2022-09-13T02:30:00+05:30 2022-09-13T02:30:00+05:30 https://bl4ck574r.github.io/posts/VULNET-Internal/ Blackstar Enumeration Starting with nmap Nmap scan report for 10.10.30.99 [29/40] Host is up (0.21s latency). PORT STATE SERVICE... Cyber Crafted2022-09-13T02:30:00+05:30 2022-09-13T02:30:00+05:30 https://bl4ck574r.github.io/posts/CyberCrafted/ Blackstar Enumearation As always,starting our enumeration with nmap Nmap scan report for 10.10.24.240 Host is up (0.20s latency). Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.6p1 Ubuntu 4ubuntu0.5 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 2048 37:36:ce:b9:ac:72:8a:d7:a6:b7:8e:45:d0:ce:3c:00 (RSA) | 256 e9:e7:33:8a:77:28:2c:d4:8c:6d:8a:2c:e7... Cat Pictures2022-09-13T02:30:00+05:30 2022-09-13T02:30:00+05:30 https://bl4ck574r.github.io/posts/Cat-Pictures/ Blackstar Enumeration Staring with nmap Starting Nmap 7.91 ( https://nmap.org ) at 2021-06-06 23:25 IST Nmap scan report for 10.10.184.159 Host is up (0.24s latency). PORT STATE SERVICE VERSION 21/tcp filtered ftp 22/tcp open ssh OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 2048 37:43:64:80:d3:5a:74:62:81:b7:80:6b:1a:23:d8:4a (RSA) | 25...