Service Scanning Flashcards
Command used to connect to HTB VPN network
sudo openvpn user.ovpn
openvpn – represents the VPN client
user.ovpn – VPN key
How do we successfully identify we connected to the VPN.
command netstat -rn
And see the tun adapter
NMAP flag for running useful NMAP scripts against a target by default.
-sC
How to locate a specific NMAP script (e.g. a vulnerability associated with Citrix)
locate scripts/citrix
Syntax for running an NMAP script
nmap –script (script name) -p(port) (host)
Technique used fingerprint a service quickly
Banner grabbing
Nmap syntax for banner grabbing
nmap -sV –script=banner (target) (port)
Netcat syntax for banner grabbing
nc -nv (host) (port)
Command to connect to FTP service via anonymous authentication:
ftp -p (IP address)
Once connected, FTP supports common commands such as cd and ls
FTP command to download files
get command
Tool used to enumerate and interact with SMB shares
smbclient
smbclient flag that specifies we want to view a list of all available shares
-L
smbclient flag suppresses the password prompt
-N
smbclient flag for downloading files
get command
