Sumo Walkthrough
Introduction Today, we're going to be doing a boot2root walkthough of the Sumo machine, created by the SunCSR Team, and hosted on Vulnhub , at https://www.vulnhub.com/entry/sumo-1,480/ . We'll be using two virtual machines for this walkthrough, our attacking Kali Linux machine, and the target Sumo machine. Locating the Target First, let's locate the target machine on the network using netdiscove r : It seems like 10.0.2.7 is out target. Scanning and Enumeration Let's start our scans with a quick Nmap scan to see which TCP ports are open. Just a couple of open ports. We'll also run the same sort of scan for UDP ports. Nothing there. Let's do an in-depth scan with Nmap on the open ports that we found. We're able to glean a couple of details from this scan, the web server is Apache 2.2.22 , the SSH being used is OpenSSH 5.9p1 , and the OS is probably Linux, estimated to be Ubuntu. Next, we'll run a Nikto scan against the target's web ...