Network Discovery & Port Enumeration
Host discovery using arp-scan and netdiscover in local bridged hypervisor environments. Full TCP/UDP port scanning and custom service banner analysis.
Boot-to-root virtual machine walkthroughs and penetration testing methodology on HackMyVM community labs, maintained by naval0505.
Host discovery using arp-scan and netdiscover in local bridged hypervisor environments. Full TCP/UDP port scanning and custom service banner analysis.
Directory fuzzing, SQL injection authentication bypasses, vulnerable CMS plugins, and unrestricted file upload vectors leading to low-privilege command shells.
Reverse engineering custom SUID helper binaries with strings, ltrace, and Ghidra. Exploiting relative path execution, buffer overflows, and environment variable hijacking.
Post-exploitation enumeration with pspy64, LinPEAS, and manual audits. Abusing wildcard injections, passwordless sudo rules, and writable scheduled scripts to gain root.