Internal Network Domain Penetration via ThinkPHP 3 Log Disclosure and Webshell Deployment

Information Gathering Target IP: 192.168.0.104 Port Scanning Perform full port scanning using masscan for speed, followed by detailed nmap scanning of open ports: masscan -p 1-65535 192.168.0.104 --rate=1000 Ports 445, 3389, and 80 indicate a Windows server with MySQL database. Web service runs on port 80, displaying a PHPStudy default page. D ...

Posted on Sun, 14 Jun 2026 17:05:00 +0000 by sgs

Windows Remote Exploitation: Metasploit Framework and Attack Forensics

Metasploit Windows Remote Exploitation This section demonstrates exploiting the MS08-067 vulnerability (CVE-2008-4250), a critical Windows SMB service remote code execution vulnerability affecting port 445. Target Environment Attacker machine: Kali Linux at 192.168.20.129 Target machine: Windows 2000 at 192.168.20.132 Exploitation Process Lau ...

Posted on Fri, 29 May 2026 23:12:46 +0000 by WendyB

Essential Metasploit Commands for Beginners

Before using Metasploit, initialize and start the database: msfdb reinit msfdb start Launch the console: msfconsole connect Command Connect to a remote host on a specific port: msf5 > connect 10.0.0.50 80 Send an HTTP GET request to review the server banner: GET / HTTP/1.1 200 OK ... show Command List all available modules: msf5 > sho ...

Posted on Tue, 19 May 2026 15:48:25 +0000 by temujinleal

Installing and Configuring Metasploit Framework on Ubuntu

Automated Installation via ScriptThe Metasploit Framework can be deployed rapidly on Ubuntu systems using the official Rapid7 installer. This method automates the installation of dependencies and the framework itself.curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate. ...

Posted on Mon, 18 May 2026 15:13:07 +0000 by mydownfall

Simulating Offensive Security Operations with Metasploit

Initializing the FrameworkAccess the primary command-line interface to begin penetration testing operations.msfconsoleEstablishing the backend database ensures efficient tracking of hosts, services, and session data.msfdb initTarget Reconnaissance via Auxiliary ModulesLeverage scanner modules to enumerate active services. For instance, identify ...

Posted on Mon, 18 May 2026 11:28:05 +0000 by Pawn

Red vs Blue Team Exercise Tools and Memory Shellcode Detection Resources

This collection focuses on resources for red-blue team exercises (often called HVV or network protection drills), specifically memory shellcode (Cobalt Strike, Metasploit) and memory horse detection tools. The directory below organizes relevant reports, toolkits, and documentation. Resource Directory General HVV Materials Practical Offense and ...

Posted on Thu, 14 May 2026 20:22:08 +0000 by Silver_Eclipse

Operational Guide to Network Security Assessment using Kali Linux

Infrastructure Deployment and Lab Preparasion Establishing a robust environment is the foundation of any security audit. Kali Linux provides various deployment options tailored for cloud, containerized, and mobile environments. Cloud Implementation via Amazon AWS Deploying Kali on Amazon EC2 allows for external penetration testing from a stable ...

Posted on Thu, 07 May 2026 10:11:30 +0000 by jalbey