Network
Network
Common ports
Get operating system information with TTL
ftp status codes
http status codes
IPV4 information
Classful range
Range Reversed
Subnetting
Calculate the subnet range
IPV6 information
Broadcast addresses
Interface addresses
ipv6 toolbox
port forward with chisel
Or
ipv6 tunnel in ipv4 with socat
Cisco commands
IOS 11.2-12.2 vulnerabilities
SVN
List of files and folders
activity reports
change list
Guess the password of OVA, O365, skype business
SNMP protocol
Need to start the tftp service
Windows executive services list
Windows open ports
Installed software
Windows users
Shared files
Listening with responder
Packet recording
Recording of port packets 22-23
Capture specific ip traffic other than subnet
Traffic recording 192.1
Timed recording of traffic
Check Reply PCAP
Checking Reply packets (FUZZ | Dos)
DNSRecon command
reverse dns lookup operation and checking the output with nmap
VPN
Write psk on the file
attack vpn server
Fiked - Create fake vpn server
Guess username with hydra
Display smb paths with smbclient
Accessing the system environment using WRM
Directing local traffic to a specified address
Putty software
Registry key to report any operation by putty (even commands and outputs)
ldap
Search for important ldap information using impackt
Display all ldap structural information
#ftp
Connect to ftp with username and password
Printers
Establish connection
Email sending and smtp password guessing
vnc
Decode the VNC Install.reg file
Oe
##CCTV
Data collection
Guess the password
Jack of all trades
SSH
connect to SSH service on the target
scan for open SSH port on the target
brute force SSH login
80 (HTTP)
retrieve content from the HTTP server on the target
scan for open HTTP port on the target
directory enumeration on the HTTP server
443 (HTTPS)
retrieve content from the HTTPS server on the target
scan for open HTTPS port on the target
perform SSL/TLS vulnerability scan on HTTPS server
21 (FTP)
connect to FTP service on the target
scan for open FTP port on the target
brute force FTP login
25 (SMTP)
connect to SMTP service on the target
scan for open SMTP port on the target
enumerate valid users on SMTP server
53 (DNS)
perform DNS lookup on the target
scan for open DNS port on the target
perform DNS enumeration on the target
110 (POP3)
connect to POP3 service on the target
scan for open POP3 port on the target
brute force POP3 login
143 (IMAP)
connect to IMAP service on the target
scan for open IMAP port on the target
brute force IMAP login
3306 (MySQL)
connect to MySQL service on the target
scan for open MySQL port on the target
perform SQL injection on MySQL database
3389 (RDP)
connect to RDP service on the target
scan for open RDP port on the target
brute force RDP login
5900 (VNC remote desktop)
connect to VNC service on the target
Last updated