Quick guide for pentest CTFs like Boot2Roots.
Methodology: identify problem(s), gather info, analyze clues, test/iterate/repeat, and avoid common mistakes.
Wikis
Blogs
Enumerate
- Open ports? rustscan, nmap.
- Running services?
- Version numbers?
- Operating System (Linux/Windows)?
- Domains?
/etc/hosts - Webserver (Apache/Ngnix)?
- Subdomins?
DNS
-
nslookup $domain -
dig -query=ANY $domain
Common Files
- robots.txt
- sitemap.xml
- .htaccess
- security.txt
- manifest.json
- browserconfig.xml
- etc
PrivEsc
-
sudo -l - curl ^
Thanks for reading