Embedded Files
Hacking into a server
December 11th, 2024
Summary:
I was tasked with hacking into/cracking into a server. The end goal of this project was to successfully crack into the server and emulate the steps that a hacker would take to break into it.
Steps include as follows:
Gathering intelligence & analyzing
Conducting a Brute Force attack
Conducting a Dictionary attack
Gain access using the information gathered from steps 1-3.
Vocabulary:
IP Address: A set of numbers that is used to identify a device on a local network. (Ex: 192.20.50.68)
A brute force attack is an attack that uses trial and error, and/or guessing the password based on prior information about the target/user.
A Dictionary Attack is a method of password cracking that uses a list of possible commonly used passwords to match up with the targets.
1. Gathering Intelligence & analyzing
This image shows information that I had about the server, including its public IP Address, private IP Address, and username.
Public IP Address: 165.155.130.24
Private IP Address: 10.197.145.185
Username: Hakhter
2. Brute Force Attack
After analyzing the information gathered about the user and the server you could try to guess a possible password. I was unsuccessful at my first try (Given 3 tries), but on my second try, I was successfully able to guess their password.
3. Dictionary Attack
Using a list of passwords given, I can conduct a dictionary attack by using tools like hydra. By using hydra, the computer would check each password from the list of passwords to find any that may correlate with the user.
4. Gaining Access
After successfully cracking the server, you can use the password from the dictionary attack to login to the server. Once gaining access, I was able to see the target's system using SSH, even being able to view their Desktop, Documents, etc.
Image Gallery
This image shows an application that allows you to add and manage your virtual machine.
This image shows an virtual machine that I used to download and test malwares and remediation afterwards.
A part of an Python code that I wrote to create an ransomware in Kali Linux
Page updated
Report abuse