OffSec — Katana Walkthrough

Hacking, Misconfigured Permissions, Unrestricted File Upload

OffSec — Katana Walkthrough

A walkthrough with my tactics, techniques, and procedures.

Reconnaissance/Scanning:

Let’s start things off with a network scan to see which ports are open and the services running on each.

$ nmap -A -O -sC -sV -p- <machine_IP>

Nmap scan results

Gobuster scan of port 80:

Gobuster scan results for port 80

Scanning /ebook directory.

Gobuster scan results for /ebook

Visiting the /ebook page.

There’s also an Admin Login link on …

a network cybersecurity directory ebook ethical hacking file gobuster hacking misconfigured network nmap offensive security offsec permissions port ports procedures reconnaissance results running scan scanning services start tactics techniques things walkthrough