7 entries tagged “SSH”. Browse all tags
The scp and sftp quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real transfer. Upload and download, copy a directory with -r, authenticate with a recovered key, hop through a jump host, pipe over ssh when scp is missing, and verify with a checksum.
A practical Chisel guide: tunnel TCP and UDP over HTTP, build a reverse SOCKS pivot from a foothold, reach internal hosts, and keep the noise low in a lab.
The Hydra quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Test SSH/FTP/SMB/RDP and database logins, brute an HTTP form with a fail or success marker, spray one password lockout-safe, tune tasks and rate, save hits, and resume an aborted run, all inside scope.
find/grep filesystem enumeration plus John cracking of GPG-encrypted files and hashes harvests reused credentials for lateral movement across users, then unrestricted sudo grants root.
WordPress user enumeration via wpscan plus SSH brute-force gain a foothold, then a cracked KeePass database yields a filename that triggers a root cron job for root credentials.
Layered web encoding (Base64/Brainfuck/QR) leaks usernames for FTP brute-force, an SSH key upload yields a shell, then a PATH-hijacked SUID binary gives root.
A WordPress login brute-forced with wpscan plants a PHP reverse shell in a theme's 404.php, then passwordless sudo nmap escalates to root.
Type to search · / or Ctrl+K to open · ↑↓ to move · Enter to open · Esc to close
