Best of SSH — August 2022

1. 1
   Article

   System Weakness·4y

   Hacking for Beginners: Exploiting Open Ports

   Metasploit is an easy-to-use tool that has a database of exploits which you can easily query. The next step is to try and exploit some open ports on one of Hack the Box’s machines. The vulnerability allows an unauthenticated user to view private or draft posts due to an issue within WP_Query.

   56

   1
2. 2
   Article

   Changelog·4y

   SSH tips and tricks

   If you use a Yubikey agent, you can use it in your remotes by having the key in a SSH agent and forwarding it. To manage the agent, I strongly recommend yubikesy-agent. If you connect and disconnect from some machines “a lot” you might benefit from keeping You can prevent that by having your client ping the server every X time.

   45

   1
3. 3
   Article

   System Weakness·4y

   TryHackMe — Brooklyn Nine Nine. Level: Easy

   Using rustscan to probe open ports 10.10.3.105 has no known vulnerability that gives us reverseshell or sth useful. I can login as ‘anonymous’ and get the file: Jake’s password seems to be too weak.

   33