Contents
1 Offensive-Security Exam Penetration Test Report 2
1.1 Introduction . . 2
1.2 Objective 2
1.3 Requirements . . 2
2 Report – High-Level Summary 3
2.1 Report - Recommendations
...
Contents
1 Offensive-Security Exam Penetration Test Report 2
1.1 Introduction . . 2
1.2 Objective 2
1.3 Requirements . . 2
2 Report – High-Level Summary 3
2.1 Report - Recommendations . . . 3
3 Report – Methodologies 4
3.1 Report – Information Gathering . 4
3.2 Report – Service Enumeration . . 4
3.3 Report – Penetration . . 5
3.3.1 Vulnerability Exploited: PlaySMS sendfromfile.php Authenticated “Filename”
Field Code Execution . . 5
3.3.1.1 System Vulnerable: 192.168.27.44 . . . 5
3.3.1.1.1 Enumeration 5
3.3.1.1.2 Foothold . . 6
3.3.1.1.3 Getting reverse shell . 7
3.3.1.1.4 Getting user session . 8
3.3.1.1.5 Privilege escalation . 9
3.3.2 Vulnerability Exploited: Default XAMP password + Tiki Wiki 15.1 - File Upload . . 10
3.3.2.1 System Vulnerable: 192.168.27.83 . . . 10
3.3.2.1.1 Enumeration 11
3.3.2.1.2 Foothold . . 12
3.3.2.1.3 Getting reverse shell . 12
3.3.2.1.4 Getting user session . 13
3.3.2.1.5 Privilege escalation . 15
3.3.2.1.6 Getting Administrator access 16
3.3.3 Vulnerability Exploited: Custom application buffer overflow . . . 17
3.3.3.1 System Vulnerable: 192.168.27.110 . . 17
3.3.3.1.1 Exploit development process 17
3.3.3.1.2 Exploiting 192.168.27.110 . . 24
3.3.4 Vulnerability Exploited: LibSSH 0.7.6 / 0.8.4 - Unauthorized Access . . . 26
3.3.4.1 System Vulnerable: 192.168.27.152 . . 26
3.4 Report – Maintaining Access . . . 28
3.5 Report – House Cleaning 29
4 Additional Items Not Mentioned in the Report
[Show More]
