Internal Network Domain Penetration via ThinkPHP 3 Log Disclosure and Webshell Deployment
Information Gathering
Target IP: 192.168.0.104
Port Scanning
Perform full port scanning using masscan for speed, followed by detailed nmap scanning of open ports:
masscan -p 1-65535 192.168.0.104 --rate=1000
Ports 445, 3389, and 80 indicate a Windows server with MySQL database. Web service runs on port 80, displaying a PHPStudy default page.
D ...
Posted on Sun, 14 Jun 2026 17:05:00 +0000 by sgs
Windows Remote Exploitation: Metasploit Framework and Attack Forensics
Metasploit Windows Remote Exploitation
This section demonstrates exploiting the MS08-067 vulnerability (CVE-2008-4250), a critical Windows SMB service remote code execution vulnerability affecting port 445.
Target Environment
Attacker machine: Kali Linux at 192.168.20.129
Target machine: Windows 2000 at 192.168.20.132
Exploitation Process
Lau ...
Posted on Fri, 29 May 2026 23:12:46 +0000 by WendyB
Essential Metasploit Commands for Beginners
Before using Metasploit, initialize and start the database:
msfdb reinit
msfdb start
Launch the console:
msfconsole
connect Command
Connect to a remote host on a specific port:
msf5 > connect 10.0.0.50 80
Send an HTTP GET request to review the server banner:
GET /
HTTP/1.1 200 OK
...
show Command
List all available modules:
msf5 > sho ...
Posted on Tue, 19 May 2026 15:48:25 +0000 by temujinleal
Installing and Configuring Metasploit Framework on Ubuntu
Automated Installation via ScriptThe Metasploit Framework can be deployed rapidly on Ubuntu systems using the official Rapid7 installer. This method automates the installation of dependencies and the framework itself.curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate. ...
Posted on Mon, 18 May 2026 15:13:07 +0000 by mydownfall
Simulating Offensive Security Operations with Metasploit
Initializing the FrameworkAccess the primary command-line interface to begin penetration testing operations.msfconsoleEstablishing the backend database ensures efficient tracking of hosts, services, and session data.msfdb initTarget Reconnaissance via Auxiliary ModulesLeverage scanner modules to enumerate active services. For instance, identify ...
Posted on Mon, 18 May 2026 11:28:05 +0000 by Pawn
Red vs Blue Team Exercise Tools and Memory Shellcode Detection Resources
This collection focuses on resources for red-blue team exercises (often called HVV or network protection drills), specifically memory shellcode (Cobalt Strike, Metasploit) and memory horse detection tools. The directory below organizes relevant reports, toolkits, and documentation.
Resource Directory
General HVV Materials
Practical Offense and ...
Posted on Thu, 14 May 2026 20:22:08 +0000 by Silver_Eclipse
Operational Guide to Network Security Assessment using Kali Linux
Infrastructure Deployment and Lab Preparasion
Establishing a robust environment is the foundation of any security audit. Kali Linux provides various deployment options tailored for cloud, containerized, and mobile environments.
Cloud Implementation via Amazon AWS
Deploying Kali on Amazon EC2 allows for external penetration testing from a stable ...
Posted on Thu, 07 May 2026 10:11:30 +0000 by jalbey