THM-WALKTHROUGH

Guided Pentest: Infrastructure

Task 1 : Introduction

In this section, we do not need to perform any specific actions. Simply connect to the AttackBox using Kali Linux, or use the built-in AttackBox provided by THM.

Task 2 :Enumeration

Enumeration is the foundation of every penetration test and, without it, you’re just guessing. The goal here is simple: learn as much as you can about the target before making any moves. What ports are open? What services are running? What versions are behind them? Every piece of information you gather now shapes the decisions you’ll make later.

Nmap Results

Task 3 :Vulnerability Analysis

You’ve got your scan results. Now what?

Don’t look at the output like a wall of text. Start asking questions. Is that service version outdated? Is there a known exploit for it? Is something misconfigured? Vulnerability analysis is really just the process of taking what enumeration gave you and asking, “What can go wrong here?”.

Your Nmap output gave you two open ports. The simplest method here is to Google their versions and the keyword “exploit”.

Searchsploit results

Task 4:Initial Access

By now you should have found an exploit for UnrealIRCd that abuses a backdoor left in the software. If you didn’t find it, don’t worry, it’s a learning curve.

The good part about the exploit we are going to use is that there’s a Metasploit module for it.

Task 5: Post Exploitation

Now that we’ve gotten a foothold on the target machine, we need to check for ways to escalate our privileges.

Task 6: Reporting

some general items should always be there in reporting:

• A cover page with a title, your name, and email address, and version control.
• A table of contents (Optional).
• An executive summary, aimed at the manager who requested the engagement, explaining what was achieved in non-technical terms.
• A technical summary aimed at the engineering manager, so they understand the impact and can prioritize accordingly (Optional).
• A table of all vulnerabilities found, ordered by severity, aimed at managers and engineers, again to prioritize accordingly.
• Detailed exploitation section, where each vulnerability and its impact are explained, exploitation steps and proof are shown, and recommendations for mitigations are given. This is aimed at engineers who will remediate your findings.

This is sameera , stay tuned for next walkthrough!