REDREF

A red teaming reference for attacking boxes. This repository contains notes, comands and tips for penetration testing. Notes are arranged according to the MITRE ATT&CK framework, which also aligns nicely with the way Kali Linux is structured.

Setup

[myproject]
    |
    |__ [myproject].md      <-- stores the summary notes
    |__ requirements.txt    <-- python libraries used within this project
    |__ variables.sh        <-- contains variables for the target environment
    |__ .gitignore          <-- use to tell git to ignore certain files/filetypes if using version control
    |__ .venv               <-- folder for python interpreter specific to this project

When starting a new project it is handy to create a folder structure similar to above the on the local filesystem (replace [myproject] with the name of the project). This folder will store all scripts and outputs specific to the project.

More details on this are below.

Create the notes file

Markdown (.md) format is very useful for capturing code related notes. Creating a [myproject.md] in the project root folder provides a ready reference for the process, theories, commands, dead ends, findings etc specific to the project.

Set variables

It is very useful to set shell variables that can be reused multiple times. Most of the commands in this repository rely on these variables being set. When recommencing work on a project just source variables.sh. Example contents:

target_ip='10.10.10.10'
user='john'
pass='password123'
domain='mydomain'

Python virutal environments

When crafting payloads or exploits or running custom cracking tools it is often useful to use Python. The best way of doing this is to create a virtual environment within the project folder.

• Install venv: sudo apt install python3-venv

Then from the root project folder run the following:

python -m venv .venv        # Create a new virtual environment called .venv in the current directory
source .venv/bin/activate   # Activate the environment
touch requirements.txt      # Create a requirements.txt file

By convention, the filename requirements.txt signifiies the python libraries required for the project (one library per line). Install required packages listed in requriements.txt by using pip install -r requirements.txt

General process

Getting started.

• Host and Port Scanning: First step is usually to run nmap to find out what ports and services are open. Use a range of scans. At least a broad scan to identify open ports, then use service and script enumeration to obtain further details.

Super useful reference sites:

1. WADComs: An interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

TO DO

The following sections need to find a home.

Directory enumeration

Set variables: target_url="target_url"

• Gobuster: gobuster dir -u $target_url -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt | tee gobuster_dir.txt

VHost

gobuster vhost -v -u https://abrictosecurity.com -w /usr/share/wordlists/subdomains/top5000subdomains -o vhostlist.txt

Sniffing & Spoofing

Show connected and listening sockets netstat -an (-n shows numberical port)