Disclaimer: This article is intended solely for educational and authorized penetration testing purposes. Unauthorized access to systems is illegal and punishable by law. Always have explicit permission before attempting any form of testing on a system. Linux servers are a backbone of today’s internet infrastructure, supporting critical operations for countless organizations. While Linux is known…
Continue reading →
In today’s digital landscape, businesses face a growing array of cyber threats. As these threats evolve, so new strategies must employed to combat them. One of the most effective measures a business can take to maintain its security posture is hiring a penetration tester for a short term engagement.
Continue reading →
In the rapidly evolving landscape of cybersecurity, businesses face constant threats from malicious actors seeking to exploit vulnerabilities and compromise sensitive information. To counter these threats, organizations employ various strategies, one of which involves employing Red Teams and conducting periodic penetration tests. In this blog post, we will delve into the concept of Red Teams,…
Continue reading →
If you have been doing the TryHackMe Simple CTF challenge recently, you may have ran into the problem that the original exploit is written in Python 2 for Ubuntu 18.04. The script can be converted or rewritten to Python 3, but my Debian Bookworm attack box had issues running it and showing the result. I…
Continue reading →
Hydra is a powerful tool that can help you perform penetration testing on various network services. Hydra can brute-force passwords for more than 50 protocols, such as telnet, FTP, HTTP, HTTPS, SMB, and databases. Hydra was developed by the hacker group “The Hacker’s Choice” and released in 2000 as a proof of concept tool. Hydra…
Continue reading →
If you are a penetration tester, you might need to crack passwords on Linux systems as part of your engagements. One of the tools you can use for this purpose is John the Ripper (JtR), an open source password cracker that supports many encryption and hashing algorithms. This blog post is intended to provide an educational…
Continue reading →
Penetration testing is a valuable tool for assessing the security posture of an organization. It simulates real-world attacks and identifies vulnerabilities that could be exploited by malicious actors. However, penetration testing alone is not enough to ensure a comprehensive security solution. There are several limitations and challenges that need to be addressed in order to…
Continue reading →
Welcome to the first installment of our restarted blog series, where we dive into the fascinating world of penetration testing. Today we focus on the OWASP Juice Shop application. In this series, we will explore various vulnerabilities within the Juice Shop and demonstrate how to exploit them to enhance your security testing skills. Today, we…
Continue reading →
In this presentation we will crack the password of a general Linux user via SSH in our personal lab. The machine from which we start the attack is a Kali Linux box, and the attacked machine is an ordinary Debian Linux on which a user set a weak password. Unfortunately the security settings are weak…
Continue reading →
There are excellent Linux distributions for Cyber Security professionals like Kali. They ship all the the bells and whistles that is needed for the tasks. If we want to learn how to put together our own Penetration Testing system we can use a fresh Debian Linux box. I created a small setup from the NetInstall…
Continue reading →