Blog Of Sudeepa Wanigarathne - Penetration Tester/Security Researcher/Ethical Hacker

Luanne is a machine on the HackTheBox. Hack The Box is an online platform allowing you to test your penetration testing skills and exchange ideas and methodologies with other members of similar interests. It contains several challenges that are constantly updated. This article will show how to hack Luanne box and get user.txt and root.txt. 😜Background😜 Luanne is a retired vulnerable VM from Hack The Box. 🔰Information Gathering Let’s start with a masscan probe to establish the open ports in the host. # masscan -e tun0 -p1-65535,U:1-65535 10.10.10.218 --rate=1000 Starting masscan 1.0.5 (http://bit.ly/14GZzcT) at 2020-12-02 07:55:24 GMT -- forced options: -sS -Pn -n --randomize-hosts -v --send-eth Initiating SYN Stealth Scan Scanning 1 hosts [131070 ports/host] Discovered open port 9001/tcp on 10.10.10.218 Discovered open port 22/tcp on 10.10.10.218 Discovered open port 80/tcp on 10.10.10.218 Open port 9001/tcp looks interesting. Let’s do one better with nmap scanning the discover...

😜Currently I practised various types of Dos & DDos Attacks like Syn Flood💉Http Flood🦠Tcp Flood. etc.. I tried these types  attacks to various types of websites government,media & commercial sites also. I used some paids bot machines also to perform dos attacks.. A SYN flood is a form of denial-of-service attack in which an attacker rapidly initiates a connection to a server without finalizing the connection. The server has to spend resources waiting for half-opened connections, which can consume enough resources to make the system unresponsive to legitimate traffic. Let See How to Hack Sirasatv. lk By Using Syn-Flood Attack ❤Requirements💉 1.Virtual Machine / Kali Linux / Parrot Security Os Or Any Linux Environment / Metasploit Framework 2.Victim's Host 3.Port 💉First We have to find host of Sirasatv.lk 💉You can find host very easily by using host command. And if You want you can use dmitry & Nmap like tools also.. 💉How to find Ports of this websites 1. Use Nmap,N...