Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Windows Tools in BackTrack

netspi.com | blog | #pentesting | #linux | #backtrack | #windows-tools | #wine | #fgdump

Summary

For those of you who aren’t in the loop, BackTrack is a Live Linux distribution that ships with a large number of open source tools that can be used to assess the security of networks, systems, and applications.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Dockerizing the NetSPI Linux Labs
NetSPI releases Dockerized Linux hacking labs: vulnerable images with a Metasploit attacker container let learners safely practice exploiting misconfigured services like Rsync.
blog · netspi.com
Linux Hacking Case Studies Part 5: Building a Vulnerable Linux Server
The final Linux case studies post builds a vulnerable Kali lab server, recreating the Rsync, NFS, phpMyAdmin, and sudo misconfiguration scenarios from the series for safe hands-on practice at home.
blog · netspi.com
Linux Hacking Case Studies Part 4: Sudo Horror Stories
This Linux case study covers finding SSH servers, running dictionary attacks against weak passwords, then abusing overly permissive sudo rules on sh, vi, python, and nmap to escape to a root shell.
blog · netspi.com
Linux Hacking Case Studies Part 3: phpMyAdmin
Walks through attacking insecure phpMyAdmin installs: finding exposed instances, dictionary-attacking weak passwords, uploading webshells, then pivoting to world-writable cron scripts for escalation.
blog · netspi.com
Linux Hacking Case Studies Part 2: NFS
Attacks misconfigured NFS exports: enumerating and mounting shares, spoofing UIDs to read protected files, and hunting setuid binaries to reach root, with a note on root squashing.
blog · netspi.com
Linux Hacking Case Studies Part 1: Rsync
The first Linux case study targets insecure Rsync servers: enumerating shares on port 873, grabbing sensitive files, and creating a privileged user via shadow edits when the daemon runs as root.
back