Jenkins CMS Penetration Testing via Cron Job Exploitation
Target Setup
Download the target machine image from:
https://download.vulnhub.com/jarbas/Jarbas.zip
Configure the virtual machine in NAT mode to reside on the same subnet as the attacking system.
Attacker IP (Kali): 192.168.88.133
Information Gathering
Host Discovery
Perform subnet scanning to identify active hosts:
sudo nmap -sn 192.168.88.0/2 ...
Posted on Sun, 26 Jul 2026 16:13:39 +0000 by pedroz
DC-6 Vulnhub Machine Exploitation
Environment Setup
Download the target machine from Vulnhub DC-6.
Import the target into Oracle VM VirtualBox, set network to Host-Only, and ensure the network adapter matches the Kali machine.
Start the target machine.
Penetration Process
Use nmap for host discovery:
nmap -sn 192.168.56.0/24
Port scanning with nmap:
nmap -sS 192.168.56.111
...
Posted on Wed, 13 May 2026 04:19:08 +0000 by aviavi
Using Burp Suite to Penetrate a System and Escalate Privileges via CVE-2021-3156
0x01 Reconnaissance and Initial Access
The challenge started with a login page. Directory scanning revealed no other entry points. Brute-forcing weak credentials seemed like the obvious approach, but without knowing the username policy, blindly attempting logins could trigger protective measures and expose or block our IP.
Observing a "Reg ...
Posted on Sat, 09 May 2026 00:47:15 +0000 by projectshifter