HackTheBox: Poison

I started by running Nmap against the machine: ┌──(root💀kali)-[/home/kali/Documents/poison] └─# nmap -sU -sS 10.10.10.84 Starting Nmap 7.91 ( https://nmap.org ) at 2021-02-10 15:40 EST Nmap scan report for 10.10.10.84 Host is up (0.053s latency). Not shown: 1961 closed ports, 36 filtered ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 514/udp open|filtered syslog Nmap…

VNC Authentication checking with Python

In this post i describe a small python script which can be used to determine the type of authentication used on a VNC Server. It uses the Scapy packet manipulation program to perform all the network data transmissions and retrievals. The program may not be perfect, but with my limited testing it seemed to work…