LemonSqueezy Walkthrough
Today we're going to do a boot2root pentest walkthrough of the LemonSqueezy machine created by James Hay and hosted at https://www.vulnhub.com/entry/lemonsqueezy-1,473/ . For this pentest, we'll be using two virtual machines, a Kali Linux machine as the attacking system, and the LemonSqueezy machine as the target machine. Locating the Target The first thing we'll do is locate the target machine by running netdiscover from our attacking system. Looks like 10.0.2.19 is our target. Additional Configuration The documentation for this machine tells us to add lemonsqueezy to our hosts file. That means we're going to use gedit to edit the /etc/hosts file on our attacking machine like so. Scanning and Enumeration We start our scans with a quick nmap scan on the target to determine which TCP and UDP ports are open. Looks like port 80 and 5353 are open. We run another nmap scan on these ports specifically to see if we can get more info, ...