Understanding Open Ports Services: Comprehensive Analysis and Exploitation Insights
Open ports and services found with nmap: 21/ftp(vsftpd 2.0.8+), 22/ssh(OpenSSH 7.2p2), 53/dnsmasq(2.75), 80/http(PHP 5.5+), 139/samba(4.3.9). No exploits.
Category: Network security
BORN2ROOT: Comprehensive Walkthrough with SSH, Nmap, and Privilege Escalation Techniques
BORN2ROOT identified no vulnerabilities in Apache 2.4.10. SSH access revealed partial privilege escalation. Attempts to escalate with users Martin and Jimmy failed.
Detecting and Investigating an SSH Attack from 192.168.75.129: An In-depth Analysis
An SSH attack from IP 192.168.75.129 was detected with 91 attempts and eventual login success. An SSH key was suspected to be uploaded…
Enhancing RDP Security: Detecting Brute Force Attacks and Mitigating Cryptocurrency Mining Threats
RDP security: Attack via weak RDP password by IP 192.168.115.131. Infiltration led to suspicious mining activity using xmrig.exe.
Understanding VPN Weak Password Vulnerability and Its Exploitation Techniques
A VPN weak password vulnerability allows brute force attacks to access internal networks, leading to further exploits and lateral penetration across multiple network…
Comprehensive Guide to Identifying and Mitigating Malicious Processes on a Compromised Server
To address the malicious process, confirm and terminate it with commands. Analyze network connections of process 14213 and block malicious IPs 93.240.52.232 and…
Memory Scanning for Malicious Activities: Comprehensive Investigation and Countermeasures
On January 27, 2024, a security incident involving a malicious shell script triggered an alert. Memory scanning may be needed if files are…
Detecting and Mitigating Abnormal Network Connections Using Netstat and System Tools
Using `netstat -nao`, abnormal network connections were found from PID 1748. Various malicious programs were identified and deleted, and defenses strengthened.
Xiaomi VPN Leak: Massive Security Flaw Exposes Account Passwords and Risks
Xiaomi VPN leak allowed unauthorized access. Many other security issues were identified and fixed, including employee info leaks and admin password exposures.
Load More