SEC-335: Eth. Hacking & Pen. Testing
HomeTech JournalsPersonal ProjectsSysadmin Wiki
  • SEC-335: Eth. Hacking & Pen. Testing
  • Breakdown
    • Course Overview
  • Activities/Assignments
    • Assignment 1.2: The Kali Virtual Machine
    • Activity 2.1: Host Discovery
    • Activity 3.1: DNS Enumeration
    • Activity 4.1: Exploiting Cupcake
    • Assignment 5.1: Breaking into Kali
  • Labs
    • Lab 2.1: Port Scanning 1
    • Lab 2.2: Port Scanning 2
    • Lab 3.1: Powershell and DNS
    • Lab 3.2: DNS uses TCP and UDP
    • Lab 5.1: Password Guessing
    • Lab 6.1: Cracking Linux Passwords with JtR and Hashcat
    • Lab 7.1: Exploiting pippin.shire.org (10.0.5.25)
    • Lab 8.1: Weevely
    • Lab 8.2: Reverse Shell
    • Lab 9.1: Exploit Gloin
    • Lab 10.1: Linux - Permission Vulnerabilities
    • Lab 10.2: Exploiting nancurunir
    • Lab 11.1: Metasploit
    • Final: Bree
  • Tools/Recon
    • Metasploit
    • NMAP
    • Active/Passive Reconnaissance
    • Shodan
    • The Harvester
    • Netcraft
    • Metagoofil
    • DNS-Enumeration
    • CEWL
    • rsmangler
    • Hydra
    • DIRB
    • John the Ripper
    • Hashcat
    • Passwords
    • TMP
Powered by GitBook
On this page
  • Deliverable 1. A screenshot showing your session information from your foothold session and optionally, a screenshot showing your root shell.
  • Deliverable 2. Gain a foothold on Nancurinir using Metasploit. Provide a short video or series of screenshots that document your interactions with the target via your Metasploit session(s).
  • Reflection:
  1. Labs

Lab 11.1: Metasploit

PreviousLab 10.2: Exploiting nancurunirNextFinal: Bree

Last updated 2 years ago

Deliverable 1. A screenshot showing your session information from your foothold session and optionally, a screenshot showing your root shell.

Deliverable 2. Gain a foothold on Nancurinir using Metasploit. Provide a short video or series of screenshots that document your interactions with the target via your Metasploit session(s).

Reflection:

Metasploit does make the process go faster but I did find when I had problems it felt harder to fix because it is a blackbox and just does exploits for you. I think with time I will become more comfortable with metasploit but as of right now I am still a little hesitant of it.