nc – Trenches of IT

Offensive Security – Proving Grounds – Fail Write-up

Posted on April 1, 2021March 31, 2021 by trenchesofit

Offensive Security released the Linux machine Fail on January 28th 2021. The machine is rated intermediate by OffSec and hard by the community. I felt the box was more towards the easy end of intermediate. The machine requires a bit of knowledge using ssh keys for authentication and an application called fail2ban. For those unfamiliar …

Offensive Security – Proving Grounds – Jacko Write-up – No Metasploit

Posted on March 1, 2021March 1, 2021 by trenchesofit

Jacko from Offensive Security is a Windows box with a difficulty rating of intermediate. This box included a simple path to RCE with a tricky foothold and privilege escalation. I end up going down a few rabbit holes at each stage. Lets get started with some recon. Reconnaissance NMAP scan running all scripts, determine services/version …