SoulSec Team

Optimum(10.10.10.8)Hackthebox

We start with nmap port enumeration.

Jerry(10.10.10.95)Hackthebox

Let’s start with a quick nmap and look for interesting services, with help of following commands:

Minimize false positives for WAF

“You can’t rely on anyone these days, you gotta do everything yourself.”

Celestial(10.10.10.85)Hackthebox

Let’s start with a quick NMAP scan to discover open ports

Some simple bypass tricks

Bypass Disable Functions

Configuration

disable_functions = system, proc_open, popen, passthru, shell_exec, exec, python_eval, perl_system

Linux

Advanced Recon Automation (Subdomains) case 1

The advanced in simple Recon!

Code a simple blackhole

Source Code:

 #include <linux/kernel.h>
 #include <linux/module.h>
 #include <linux/netfilter.h>
 #include <linux/netfilter_ipv4.h>
 #include <linux/skbuff.h>
 #include <linux/tcp.h>
 #include <linux/udp.h>
 #include <linux/ip.h>

static struct nf_hook_ops…