reio

Documenting my journey on Software Engineering, Cybersecurity and a little bit of everything. Working to bring learning to life. #TIL #WIP

[reio @reiopd]

Day 62 of #100DaysOfHacking

On finding flag.txt
1. On windows: `dir "/flag.txt" /s`
2. On linux: `find / 2>/dev/null | grep flag.txt`

[reio @reiopd]

Day 73 of #100DaysOfHacking
#TIL that a file can be directly dropped to cyberchef

[reio @reiopd]

Day 72 of #100DaysOfHacking

List scheduled jobs on the system
`cat /etc/crontab`

[reio @reiopd]

Day 71 of #100DaysOfHacking

Create password hash using:
`openssl passwd -1 -salt [salt] [password]`

Which can be used to add super user in /etc/passwd
`username:passwordhash:0:0:root:/root:/bin/bash`

https://t.co/pu983OmgZ4

[reio @reiopd]

Day 70 of #100DaysOfHacking

List available shells on the system using
`cat /etc/shells`

[reio @reiopd]

Day 69 of #100DaysOfHacking

Trying Volatility: https://t.co/QnD3S8Uzpg

`python3 https://t.co/5V7a761RkB -h`

[reio @reiopd]

Do you remember when you joined Twitter? I do! #MyTwitterAnniversary

[reio @reiopd]

Day 68 of #100DaysOfHacking

Change the nmap user agent by adding the option:
`--script-args http.useragent="Snoopy"`

[reio @reiopd]

#TIL Amazon EC2 means Amazon Elastic Compute Cloud.

[reio @reiopd]

Day 67 of #100DaysOfHacking

*Inspect element
display:block
display:none

#tryhackme walking an application

[reio @reiopd]

Day 66 of #100DaysOfHacking

Trying to build GVM stack from source
https://t.co/UARNbTveyB

[reio @reiopd]

Running chrome on linux without web security:

google-chrome --user-data=dir/temp --disable-web-security

[reio @reiopd]

Day 65 of #100DaysOfHacking

TIL there's Dark theme in Burp Suite
Go to User Options -> Display -> User Interface

[reio @reiopd]

Day 64 of #100DaysOfHacking

Some Burp Suite keyboard shortcuts:

1️⃣ Ctrl+Shift+D : Switch to Dashboard
2️⃣ Ctrl+Shift+T : Switch to Target tab
3️⃣ Ctrl+Shift+P : Switch to Proxy tab
4️⃣ Ctrl+Shift+I : Switch to Intruder tab
5️⃣ Ctrl+Shift+R : Switch to Repeater tab

[reio @reiopd]

Day 63 of #100DaysOfHacking

Nice introduction on Insecure Direct Object Reference (IDOR) Check it out: https://t.co/sVC5vqQlqV #tryhackme #security #idor via @tryhackme

[reio @reiopd]

Day 61 of #100DaysOfHacking
#metasploit fundamentals

- `setg` to set global values to be used across modules
- `unsetg` to unset

[reio @reiopd]

Day 60 of #100DaysOfHacking

The Sysinternals toolset includes strings.exe which can be used to extract "strings" stored within a file or application.

strings.exe calculator.exe > strings.txt
https://t.co/usHYFfUVZq

[reio @reiopd]

Day 59 of #100DaysOfHacking

cd /tmp

Usually the place for enumeration scripts since any user can write to /tmp directory by default.

#tryhackme #linux fundamentals

[reio @reiopd]

Day 58 of #100DaysOfHacking

su -l user2

switch user to user2 using `-l` or `--login`
- present working directory will be user2 home
- properties will be similar as user2 logging in

#tryhackme #linux fundamentals

[reio @reiopd]

Day 57 of #100DaysOfHacking

Use `-h` flag to display the file size in a "human-readable" format

#tryhackme #linux fundamentals