owned this note   changed 5 years ago  
Published Linked with GitHub

HackOdense #3 - recon!

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

  • Who: HackOdense and friends
  • Location: Room X0.03
  • Date: June 6th 2019, 17.00

Agenda

  1. Hello and welcome - moozer, Jeppe, silverbaq
  2. Introducing network recon
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
    17:15 - moozer
  3. Hands-on - guided stuff
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
    17:45 -moozer
  4. Pizza
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
    18:30
  5. Hands-on - free form w. suggestions
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
    19:00 - moozer
  6. The end

Welcome

Silverbaq Jeppe Moozer
@silverbaq @ern_st @moozer
Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

and the rest of the crew

Introducing recon

Recon is many things…

Network recon today

What is a network?

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

  • Geek basics: routers, switches, ip adresses, ports and services
  • For users: URL => Webservers, DNS servers, Mail and so on

indispensibles!!!

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

or tsharkor tcpdump

(but we are not using it today)

Status

  1. find subdomains and their IPs
  2. find services

Simple domain lookup

Simple MX

apt-get install dnsutils, dnsenum is cool too

DNS is complex with lots of details

Alternatives to dig *.eal.dk
Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Look into sublist3r, dnsrecon

and their ips/CNAMES
Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

dig -f eal.dk.subdomains +short
(check the man page)

BTW, Who owns it?

domain IP

dig eal.dk gave me the IP
notice: RIPE vs. dkhostmaster

How to get there?

use traceroute

Status

  1. find subdomains and their IPs
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
  2. find services (NB:
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
    )

web is easy

  1. nmap -iL eal.dk.subdomains --top-ports 5 -oX /root/eal_dk_ports.xml
  2. `eyewitness -x /root/eal_dk_ports.xml

anything interesting?

nmap

know your nmap
https://www.shellhacks.com/20-nmap-examples/

web server and openssl versions?

any known vulnerabilities on apache openssl?

shodanhq

net:185.19.132.0/22 from whois eal.dk

bonus if we have time

ssl certificates

e.g. sslscan mail.eal.dk, sslscan selvbetjening.eal.dk

Pizza!

your turn

  1. select a domain
  2. find subdomains
    anything odd?
  3. find services
    anything odd?
  4. finde versions
    anything odd?

The End

  • Andre events, tak til, mm moozer Jeppe

Evaluation!

Please use 5 minutes to tell us what you liked and/or didn't today :)
bit.ly/ho-eval-3

We want volunteers for the NOC team

Next thursday!


13/6 17:00 @ PROSA Odense
Alexander Færøy - tor project core developer will be talking about the tor project
The grill will be 🔥 and 🌭 will be served
We'll bust out some board games if people want to stick around 🎲
sign up at prosa.dk

Select a repo