Hacking For Ramen – Telegram

Hacking For Ramen

@HackingForRamen

308 subscribers

24 photos

2 videos

1 file

62 links

Journey from Zero to Hero.
Pentest, RE, ExploitDev, Malware Analysis.
Chat: https://t.iss.one/+43eHuXah_ZxjODBi

Download Telegram

About

Blog

Apps

Platform

Hacking For Ramen

308 subscribers

Hacking For Ramen

Channel created

09:25

Hacking For Ramen

Hello username.
welcome to this channel about different aspects of hacking. It’s planned to be a personal blog to share different writeups and resources, that might comes handy in your journey of penetration testing, exploit development, or bug bounty hunting.
Hack the planet!

112 views15:47

Hacking For Ramen

Tags:
#hackthebox #tryhackme #vulnhub #exploitdev #nebula #review #pentest #cert #review #exploitdev #binaryexploitation #web #memes #malware #adventofhacking #conference #ctf #RE

123 viewsedited 15:49

Hacking For Ramen

I'd like to start with the classic. One of my very first writeups - Mister Robot.
#vulnhub #pentest
https://telegra.ph/Mister-Robot-writeup-09-20

In this writeup, I will cover an awesome machine from the VulnHub - Mr.Robot. There is also a version of that machine on TryHackMe! Description:

118 views16:49

Hacking For Ramen

An easy #hackthebox machine where you can practice your Active Directory pentest skills:
https://telegra.ph/Forest-writeup-09-21

Forest is an awesome Windows-based machine, difficulty was set as “Easy”, user score is 4.6. This machine is all about Active Directory exploitation.

89 views07:38

Hacking For Ramen

Another "classic" Active Directory based machine from HTB. Both Sauna and Forest are currently listed in TJNull's list that can help you to prepare yourself for OSCP exam.

#pentest #ActiveDirectory #hackthebox
https://telegra.ph/Sauna-writeup-09-21

Sauna is a great machine for sharpening your Active Directory skills. To solve this machine you have to properly enumerate the domain, and with a pinch of OSINT, find the correct username. The hash for the user might be captured by the AS-REP Roasting attack.…

84 views11:36

Hacking For Ramen

The list itself, in case if you don't know what I'm referring to. This is probably the best resource on your journey to become an #OSCP holder. There are both, #vulnhub and #hackthebox machines with different levels of difficulty. Bonus points for those who can actually figure out why each machine is listed there 😉
https://docs.google.com/spreadsheets/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8

NetSecFocus Trophy Room

69 views13:34

Hacking For Ramen

A bunch of next writeups will be for Offensive Pentesting learning path from #tryhackme. You can learn more about it here: https://tryhackme.com/path/outline/pentesting.
It's also a nice way to prepare yourself for the #OSCP exam, so I noted down almost all writeups for it as well.
Enjoy!

Offensive Pentesting

Acquire the skills needed to go and get certified by well known certifiers in the security industry. Learn about industry-used penetration testing tools and attain techniques to become a successful penetration tester.

61 views07:10

Hacking For Ramen

The Vulnversity will be the first machine in this series. It's a pretty classic exploitation path for the web server with further privilege escalation process via abusing the SUID bit on one of the binaries. For all machines in this series I put takeaways at the end of the writeup.

#tryhackme #pentest
https://telegra.ph/Vulnversity-09-22

Vulnversity is the first machine in TryHackMe’s “Offensive pentesting” path.

66 views07:19

Hacking For Ramen

Exploiting the legendary EternalBlue (CVE-2017-0144) vulnerability in this TryHackMe machine.

#pentest #tryhackme
https://telegra.ph/Blue-09-22-4

Blue is the second machine in TryHackMe’s “Offensive pentesting” path.

64 views08:33

Hacking For Ramen

Kenobi is the third machine in TryHackMe’s Offensive pentesting path. Identifying and exploiting the vulnerability in FTP server. To escalate privileges to root you will need to use the combination of SUID binary and PATH variable.

#pentest #tryhackme
https://telegra.ph/Kenobi-09-22

Kenobi is the third machine in TryHackMe’s “Offensive pentesting” path.

63 views08:57

Hacking For Ramen

Another Mr.Robot-themed machine. Exploiting the HTTP file server to get the initial shell, and finding a Unquoted Service Path vulnerability to privesc,

#tryhackme #pentest
https://telegra.ph/Steel-Mountain-09-23

Steel Mountain is the first machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. > Enumeration By scanning the machine with nmap we can see that both port 80 and port 8080 are running the HTTP services. Port 80 has nothing…

67 views07:25

Hacking For Ramen

From Mr.Robot to Batman! In Alfred you will need to exploit misconfigured Jenkins instance, and on a later stage impersonate a client with the SeImpersonatePrivilege role.

#tryhackme #pentest
https://telegra.ph/Alfred-09-23

Alfred is the second machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. > Enumeration The output of the nmap scan: nmap -sC -sV 10.10.0.34 80/tcp open Microsoft IIS httpd 7.5 3389/tcp open ssl/ms-wbt-server? 8080/tcp open…

68 views07:36

Hacking For Ramen

Moar themed machines! Next in the line - IT. Bruteforcing our way into the web server, finding the exploit for Remote Code Execution, and getting the root by tampering the misconfigured service.

#tryhackme #pentest
https://telegra.ph/HackPark-09-23

HackPark is the third machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. > Enumeration Nmap scan: nmap -sC -sV -o nmap.txt 10.10.37.35 80/tcp open http Microsoft IIS httpd 8.5 3389/tcp open ssl/ms-wbt-server? By navigating…

69 views11:58

Hacking For Ramen

Theme for the next machine is Hitman, as in this box you will be breaking into the forum about games.
SQL injection for the foothold, and quite tricky PrivEsc as I wanted to avoid using Metasploit.

#tryhackme #pentest
https://telegra.ph/Game-Zone-09-23

Game Zone is the fourth machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. > Enumeration Nmap scan output: nmap -sC -sV -o gamezone <ip> 22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.7 ( 80/tcp open http Apache httpd 2.4.18…

75 viewsedited 16:09

Hacking For Ramen

Dipping your toes into Digital Forensic just a bit. Analyzing the .pcap file to replicate attacker's action. This machine is different from others in this series, but it's worth checking.

#tryhackme #pentest
https://telegra.ph/Ovrpass2-09-23

Overpass2 is the seventh machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. > PCAP analysis That is an unusual type of machine for me. We got the .pcap file with the network dump. There are few ways to work with .pcap…

78 views16:24

Hacking For Ramen

Hacking Skynet in this Terminator-themed machine. A LOT of enumeration with a pinch of brute forcing. Exploitation is straight forward, PrivEsc part will...take some time 😉

#tryhackme #pentest
https://telegra.ph/Skynet-09-23

Skynet is the fifth machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. > Enumeration Let’s start with the nmap scan: nmap -sC -sV -o nmap.txt <target_ip> 22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.8 80/tcp open http…

79 views16:39

Hacking For Ramen

The machine that will force you to TRY HARDER

#tryhackme #pentest
https://telegra.ph/Relevant-09-23

Relevant is the eighth machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. > Enumeration Nmap scan result: nmap -sC -sV -o nmap.txt <target_ip> 80/tcp open http Microsoft IIS httpd 10.0 135/tcp open msrpc Microsoft Windows…

84 views16:56

Hacking For Ramen

The last writeup on Offensive Pentesting learning path from me. Kicking Wordpress and Jenkins instance in that one.

https://telegra.ph/Internal-09-23-2

Internal is the last machine in the “Advanced Exploitation” part of TryHackMe’s “Offensive pentesting” path. Enumeration As I’m starting to prepare for my “Dry run” for the OSCP exam, this time I will use more stuff from my methodology. We already learned…

86 views17:20