Footprinting hard lab

HTB Content Academy
1

Hi, im at footprinting hard lab and stuck after i use nmap for pop3/ imap, and SNMP
can you guy show me next step to do it? thank you

2

Take a closer look at SNMP

1 Like
3

I solved it, i was confused where to look at community string in onesixtyone but it all good now

4

Kindly any hint for me?
The last thing I’ve achieved is connecting to tom’s via ssh.
I don’t know what to do after.

5

after you login tom account:
use “ls -al”
you will see .bash_history
use “cat .bash_history”
you will see history of tom using username and password to login mysql

that’s my hint, good luck!!!

1 Like
8

hey mate i just use onesixtyone and the exact list from SNMP section from SecLists but i don’t find any valid name. only Linux NIXHARD. Any tip?

9

pay attention to the one inside the [ ]
after that use braa

2 Likes
10

The community string is actually what’s inside the brackets. In this case, when you run onesixtyone the community string should be [backup]. Everything else doesn’t really matter (for the purposes of plugging into braa). Hope this helps.

4 Likes
11

this was a great lesson thanks for the tip

1 Like
13

You scanned TCP only

21

yes i need help bro

22

do you use discord? give me your discord and i will add you

23

backgear

24

I Confimed that braa is broken in my computer, hours wasted for nothing

1 Like
25

Same! I was going crazy til I saw this and tried the same command on a workstation.

26

How to find out the ssh key of tom? i got some credential of tom via snmpwalk. And not sure what the next step.

27

Hey there XLL.

Great job on finding the creds for tom so far. You’re almost there. Have you attempted utilizing those found credentials in a curl -k ############# command? If not, I suggest looking back onto how to utilize that curl -k flag to connect to SSH.

If you continue to have issues, feel free to reply or DM me.

Thank you,

DotDragon