Tech Trend insighTs

 > DNS (Domain Name System) Introduction Computers as we know communicate and work through binaries, these binaries can be represented in more ways than one such as hexadecimal or denary to mention a few. In a networking context, we have IP addresses that are given to nodes (PCs, smartphones, etc) allowing them to be individually identified within a network. Purpose of a DNS The majority of websites are hosted within a server or the cloud, when accessing their websites our web browser requires the IP address of that server to initiate communication with the target website. Since we know that IP addresses are nothing less than a group of 4 octets separated by a full stop 157.240.22.35, it's difficult for us to type http://157.240.22.35 in the web browser every time we need to access a website such as Facebook. It is this convenience that DNS provides. With the help of DNS, we can enter https://www.facebook.com/ without the need to remember the IP address of Facebook’s server. im...

  > TryHack3M: Bricks Heist ( TryHackMe) Before beginning we need to edit our /etc/hosts file which makes it easier to use the target machine during scanning and exploitation phases.  The /etc/hosts file serves as the first source of hostname-to-IP address mappings before accessing the DNS servers. sudo vim /etc/hosts Thereby if we include our attackbox IP as bricks.thm whenever we access https://bricks.thm in our we browser the atttackbox IP is mapped accordingly. Reconnaissance Nmap We will begin the box by setting up an nmap scan to identify the vulnerable services running on the ports. nmap -sC -sN -oN initialNmap <TARGET-IP> -sC → Default script scanning -sN → This flag specifies a TCP NULL scan. This technique is used to determine whether the ports are open, closed, or filtered by observing the response behavior of the target system. -oN → Instructs Nmap to save the output by this file name The output of this scan does not help us much. When we access the sit...

> Pickle Rick CTF ( TryHackMe) Setting up the box I would recommend to play the box using openvpn rather than accessing the AttackBox. There are a couple of reasons for this: Services may not be updated, thereby occasional vulnerabilities may not be visible as the detection tools are not up to date Difficulty in maneuvering the interface, as you are much more suited to your personal VM How to start this box from your VM? Firstly go to the website and download the configuration file. You can either do this on your Virtual Machine or download it in your PC and share it to the VM using “Shared folder” Click on your profile and choose “Access”. From this page you can see both the “Server status” and “Connection” From here choose the server which you are closest to (quick google search will do the job), and download the configuration file Run the config file from its location. (if your current working directory is where the config file is located run your .ovpn file as such) ...