Footprinting hard lab

HTB Content Academy
1

Hi, im at footprinting hard lab and stuck after i use nmap for pop3/ imap, and SNMP
can you guy show me next step to do it? thank you

2

Take a closer look at SNMP

3

I solved it, i was confused where to look at community string in onesixtyone but it all good now

4

Kindly any hint for me?
The last thing I’ve achieved is connecting to tom’s via ssh.
I don’t know what to do after.

5

after you login tom account:
use “ls -al”
you will see .bash_history
use “cat .bash_history”
you will see history of tom using username and password to login mysql

that’s my hint, good luck!!!

1 Like
8

hey mate i just use onesixtyone and the exact list from SNMP section from SecLists but i don’t find any valid name. only Linux NIXHARD. Any tip?

9

pay attention to the one inside the [ ]
after that use braa

2 Likes
10

The community string is actually what’s inside the brackets. In this case, when you run onesixtyone the community string should be [backup]. Everything else doesn’t really matter (for the purposes of plugging into braa). Hope this helps.

3 Likes
11

this was a great lesson thanks for the tip

1 Like
12

Hi.
I have no SNMP in my scan.
image

13

You scanned TCP only

14

Thanks. It was helpfull.