Saihat's Network Security Blog

Introduction Today we're going to be doing a walkthrough for the VulnNet: Roasted room hosted at https://tryhackme.com/room/ vulnnetroasted . For this walkthrough, we'll be using two virtual machines (VMs), a Kali Linux VM as our attacking machine, and the deployed Windows client as the the victim machine. After we're given the IP address of the server, we assign the IP address to the alias vulnnet-roasted.thm . The first thing we'll do is fire off an Nmap scan. nmap -Pn -p-10000 -T4 vulnnet-roasted.thm nmap -Pn -T4 -sV -sC -p53,88,135,139,389,445,464,593,636,3268,3269,9389 vulnnet-roasted.thm This server appears to be domain joined, and being the only (we assume) domain joined server on the network, we can assume that it is also the Domain Controller. Let's test whether or not we can brute-force the usernames from the server using Crackmapexec: crackmapexec smb vulnnet-roasted.thm -u guest -p ‘’ --rid-brute Because the guest account was not ...

Introduction Today we're going to be doing a walkthrough for the Brainstorm room hosted at https://tryhackme.com/room/ brainstorm . For this walkthrough, we'll be using two virtual machines (VMs), a Kali Linux VM as our attacking machine, and the deployed Windows Brainstorm client as the the victim machine. Task 1 - Deploy Machine and Scan Network Questions: Deploy the machine No answer needed How many ports are open? First, we're going to add the IP address of the Brainstorm machine to our attacking machine's / etc/hosts file. In the current version of Kali,we need switch to Root before doing so: As Root: echo “10.10.100.56 brainstorm.thm” >> /etc/hosts At the time of our examination of the network, there were a number of machines live in the network, and the number of open ports on those systems does not match the answer for this question. Neither does the number of open ports on the brainstorm.thm machine. In the end, we brute forced the answer. Task 2 - A...