What's Your Methodology?

Hi guys,

I’m new to this and was just wondering the processes others use when first taking on a machine.

Hey Miles,

In my opinion,

Look at some of the writeups/videos provided by hackthebox members, for example:

Ippsec: https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA
0xdf: https://0xdf.gitlab.io/
0xrick: https://0xrick.github.io/

Theres also plenty of others with writeups/videos. They follow the same methodology of Scanning,Enumeration,Gaining Access,Privesc etc. The best thing about these is that someone may have a different appoach to something and use various tools to fit.

Type your comment> @r518 said:

Hey Miles,

In my opinion,

Look at some of the writeups/videos provided by hackthebox members, for example:

Ippsec: https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA
0xdf: https://0xdf.gitlab.io/
0xrick: https://0xrick.github.io/

Theres also plenty of others with writeups/videos. They follow the same methodology of Scanning,Enumeration,Gaining Access,Privesc etc. The best thing about these is that someone may have a different appoach to something and use various tools to fit.

Awesome, thank you for the channel link too hopefully all those resources should get me on the right track! I also purchased the Kali Cookbook from Pakt too.

  1. check smb
  2. rpc nfs
  3. ftp
  4. http/tcp —> nikto, gobuster
    ----> logins
    -----> credentials
    ---------------->xss sqli xxe etc…
  5. other