TryHackMe - Guided Pentest: Infrastructure | Full Walkthrough

The walkthrough provided outlines a comprehensive penetration testing process for a machine named "Pentest Target" on TryHackMe. Here's a summary of the key steps and findings:

Enumeration

1. Nmap Scan: Conducted an initial Nmap scan using nmap -sC -sV <TARGET_IP> to identify open ports, services, and versions.
   • Open Ports: 22 (SSH), 80 (HTTP), 6667 (IRC)
   • Services: Apache HTTP Server, SSH, Unreal IRCd

Vulnerability Research

1. Searchsploit: Used searchsploit to find known vulnerabilities for the services identified in the Nmap scan.
   • Found a critical vulnerability in Unreal IRCd version 3.2.8.1.

Initial Access

1. Exploitation with Metasploit:
   • Chose unix/irc/unreal_ircd_3281_backdoor exploit from Metasploit.
   • Set the payload to cmd/unix/reverse.
   • Configured options: RHOSTS, LHOST, and LPORT.
   • Exploited the IRC server using the backdoor

Read the full article at InfoSec Write-ups - Medium

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.