Disclaimer: this might only works with exposed .git directory with directory listing enabled. TLDR: $ wget --mirror --convert-links --no-parent --wait=0.5 https://sub.vulnerable-site.com/.git/ $ cd sub.vulnerable-site.com $ git restore '*' So recently I just found an exposed .git directory, as usual, I ran GitTools’ to dump and extract that particular directory. But…

For Indonesian version of this write-up, click here. Setup I run the VM using Virtualbox with bridged adapter. Some machine may require a specific hostname in /etc/hosts . Otherwise, you can add the machine’s IP address into /etc/hosts to make things more easier and simpler. Here I used bytesec.vh …

For Indonesian version of this write-up, click here. Information Gathering NMAP nmap -sC -sV -p- djinn.vh -v -oN initial.nmap PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.3 | ftp-anon: Anonymous FTP login allowed (FTP code 230) | -rw-r--r…

For Indonesian version of this write-up, click here. Setup Add machine’s IP address with localhost hostname in /etc/hosts , don't forget to comment out other loopback addresses with the localhost hostname. #127.0.0.1 localhost 127.0.1.1 kali # The following lines are desirable for…

Information Gathering Nmap nmap -sV -sC -p- hacknos.vh -oN initial.nmap -v Server cuma menjalankan SSH dan web server. Directory Scanning dirb http://hacknos.vh /usr/share/wordlists/common.txt

Kali ini saya akan memposting tentang write-up salah satu VM di VulnHub yaitu Os-HackNos. Machine ini memiliki difficulty Easy to Intermediate. Konfigurasi Network Saya menjalankan machine ini di VirtualBox dengan adapter Bridged terkoneksi ke WiFI. Information Gathering Yang pertama harus diketahui adalah IP address dari si target. …

Pertama jalankan ssh-keygen untuk membuat key pair ssh-keygen Perintah diatas akan membukan pasangan key berupa private key (id_rsa) dan public key (id_rsa.pub) Setelah membuat key pair, kita dapat menggunakan perintah ssh-copy-id untuk mengirim public key yang sudah kita buat ke server tujuan. ssh-copy-id nama_user@alamat_server ssh-copy-id umumnya hanya dapat digunakan di sistem berbasis Linux. Apabila Anda menggunakan Windows, Anda dapat menambahkan isi dari id_rsa.pub ke nama_user/.ssh/authorized_keys secara manual