hi all!
starting my 90 days journey in a few days time...
about me:
less than a year experience in infosec industry.
passionate and enthusiastic.
although it seems way out of my league, I figured I'll be able to learn a lot even if I failed.
I've been reading and learning a lot from here so now, its my turn to give back
I'll be updating my progress, thoughts, opinion as I progress through, as often as I possibly can, and hopefully it'll be helpful.
Cheers!
week 4
one month flew by so quickly! I'm quite delighted to be able to meet my own expectations. -> 15 host first month.
however, things seems to be getting harder and slower. no more easy priv esc exploit that works out of the box.
its tough not knowing what you are suppose to do.., even if the answer is right in-front of you.
sure there are many examples and references that helps,
https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/
But if no point if you have no idea how to carry on from all the outputs.. how to make use of it.., etc.
I'll continue to try harder and hopefully will be able to hit 30 host by the end of second month!
current progress: 17 system/root access, 3 low privilege.
the most useful prep work I've done so far before taking this up was to read through all the vulnhub's vm walkthrough.
if you have the time to actually do the vm it will be much beneficial.
https://www.vulnhub.com/series/kioptrix,8/
week 3
kinda busy with some personal stuff this week.. hmm.
-> done with 5 machines documentation
-> 2 system/root, 1 low-privilege shell.
currently melting my brain to escalate.
current progress: 12 system/root access, 1 low privilege.
week 2
trying to read up on everything that I don't understand (Which is a lot!). I am really glad that I took this path because I've learned so much in this 2 weeks! Being able to apply immediately on the lab machines helps so much as well..The "low-hanging" machines are almost clearing. Need to start on my documentation soon.
current progress: 10 system/root access. (9 if you don't count duplicates)
week 1
Managed to get through the videos till the buffer overflow topic. looking good and fun
I realized that it's possible my previously owned boxes might not be fully exploited by me, as I did not revert it prior attacking it. I will have to re-do them to ensure that it is my work.
it has been 1 week and I'm officially struggling my ass. REALLY REALLY huge knowledge gaps. need to read up on a wide range of topics.. looking bad.
current progress, 4 with metasploit, 1 manual.
