Tech Trend insighTs

  > TryHack3M: Bricks Heist ( TryHackMe) Before beginning we need to edit our /etc/hosts file which makes it easier to use the target machine during scanning and exploitation phases.  The /etc/hosts file serves as the first source of hostname-to-IP address mappings before accessing the DNS servers. sudo vim /etc/hosts Thereby if we include our attackbox IP as bricks.thm whenever we access https://bricks.thm in our we browser the atttackbox IP is mapped accordingly. Reconnaissance Nmap We will begin the box by setting up an nmap scan to identify the vulnerable services running on the ports. nmap -sC -sN -oN initialNmap <TARGET-IP> -sC → Default script scanning -sN → This flag specifies a TCP NULL scan. This technique is used to determine whether the ports are open, closed, or filtered by observing the response behavior of the target system. -oN → Instructs Nmap to save the output by this file name The output of this scan does not help us much. When we access the sit...

> Pickle Rick CTF ( TryHackMe) Setting up the box I would recommend to play the box using openvpn rather than accessing the AttackBox. There are a couple of reasons for this: Services may not be updated, thereby occasional vulnerabilities may not be visible as the detection tools are not up to date Difficulty in maneuvering the interface, as you are much more suited to your personal VM How to start this box from your VM? Firstly go to the website and download the configuration file. You can either do this on your Virtual Machine or download it in your PC and share it to the VM using “Shared folder” Click on your profile and choose “Access”. From this page you can see both the “Server status” and “Connection” From here choose the server which you are closest to (quick google search will do the job), and download the configuration file Run the config file from its location. (if your current working directory is where the config file is located run your .ovpn file as such) ...

> IP Tables Learning about IP Tables enables us to control data that flows into and out of our computer. Essentially a firewall functions as a filter blocking restricted content and allowing trustworthy communications. (img by freepik - iconsea) We can establish firewall rules with the help of IP Tables. This is exactly what will be covered by the following. Viewing IP Tables Navigate to the terminal in your Linux distribution by typing “iptables -L”. You can view the rules and regulations in place. (Note that you will require root privileges to run this) If you see results as such, this is the default view hence there are no rules set on your computer Chains From the above picture, you could see 3 different chains. INPUT → All incoming traffic to your computer FORWARD → This happens in routers, mostly functional when setting up firewall policies in routers. OUTPUT → All outgoing traffic from your computer Blocking Traffic This shows that all incoming traffic is allo...

 > Routing Tables Explained The router is a primary component to connect to the internet, but do you know what happens and how it is configured, lets have a peak into Routing Tables. (img by freepik) Introduction Whenever you connect to a website you are not directly connected to the website, for your data to get there it needs to pass through a bunch of routers. So how do the routers know which path to take? Cuz your router has a bunch of ethernet cables attached to it, how does it choose which road to send your data to? Scenario For this example we will go ahead with the following example. Terminology Destination → Final destination or the end path or the end IP address of whichever server that you are trying to connect to Gateway → IP address of your gateway or router (some people refer to routers as gateways, this is cuz your router is a gateway to another network) Genmask → This is the obvious subnet mask field Iface → Displays each NIC and WNIC in your computer (...

> Subnetting Explained Introduction Simplified Subnetting , Let’s untangle the knots and dive into the world of networks. Isn't it strange to see the IPv4 address of your laptop and IPv4 address you see on google are actually different ? (img by freepik - vectorsclub) Identification used in the interconnected network. A school identifies their students from admission numbers. Each person has different telephone numbers. Houses have addresses. “Ah Ha, this all revolves around a primary key”. That’s the identification. Likewise the internet has IPv4 addresses. Although they are running out. Incredibly fast… The bearer of IP addresses Routers as we all know are middlemen. These devices are configured by ISP’s in your houses or office, to provide a connection, which enable devices to communicate with the internet, and browse various sources such as Netflix, or eBay. So where’s your IP address ? When you connect to a network such as your home Wi-Fi, each device is provided an IP a...