Walkthrough - VulnHub Tr0ll-3

The VulnHub Tr0ll-3 is a privilege escalation boot2root box. The level of the box is simple as there are no binary exploits and no enumeration and accessing the initial shell. We are treated with the initial login credential that is start:here. You can download the box here Tr0ll-3.

Quick Setup Vulnerable Web Application Lab

There are a lot of things to learn about Web application hacking and Penetration Testing. You can learn these things only by practicing those learnings in a private virtual environment. You can set up that virtual environment very quickly by following this article. Here we are going to build an isolated lab within your laptop or desktop with no extra hardware required. 

One-Liners Payload Delievery with Kali & Parrot-Sec OS's

Previously we discussed some of the ways through which we can transfer an advanced payload like meterpreter to the victim's machine during penetration testing and red teaming. Today we will see how quickly we can transfer these advanced payloads using some one-liners.

Tools used:

Kali OS

Python 2.7 | 3.7

PHP

Netcat

Create a FTP server to transfer Payloads with Kali Linux | Parrot-Sec OS

In this article, we will learn about creating an FTP server to transfer an advanced payload like meterpreter to the victim machine. This is very much convenient and reliable when transferring to the Windows machine as FTP client is already installed and enabled in all of them.

FTP:

FTP is an acronym of the file transfer protocol. This protocol allows us to upload and download a file from the FTP server with or without authentication. FTP works on TCP protocol, which provides a reliable means for the transfer of data.

TFTPD payload delievery | Create a TFTPD server and access it from victims machine | Advanced Penetration testing

In this article, you will be going to learn about how someone can deliver a more advanced payload like meterpreter on the victim 's box after getting an initial shell on the box with the help of the Advanced TFTP server, that is already installed on your Kali machine. This is a series of short articles, which will discuss major techniques of how to transfer an advanced payload on a victim machine after getting an initial shell on the box. In all these techniques one thing we have to imagine here is that we had an initial shell on the box, and we are trying to upload advanced payloads to the victim machine.

Create Netcat Reverse Shell and Bind Shell.

This article explains how the two types of connections, Reverse connection and Bind connection are made to get a shell on the box with Netcat utility. Ncat or Netcat is a feature-packed networking utility which reads and writes raw data across networks from the command line. A utility like Netcat helps us to get a reverse shell in multiple situations like getting shell while RCE in web applications, during post-exploitation, and many more.
The bind connection is that when you have to connect to the remote IP address and port number, which is, most of the time does not work due to the presence of a firewall at another end, which is blocking all incoming connections unless the port is in the exception list.

Install and Configure SSH Service in Kali Linux | Linux

In this article, you will learn how to install and configure SSH service in Debian based operating systems like Kali Linux. SSH service is used to access the command line terminal remotely. The SSH service 'Secure Shell' makes use of encryption with public/private keys to make your connection secure.

Installing SSH service on Kali Linux

Kali Linux is pre-installed with Open SSH service, we do not have to install it. If you are using any other Debian based system, then complete the installation by doing these steps.