{"id":52,"date":"2022-03-31T00:14:21","date_gmt":"2022-03-31T00:14:21","guid":{"rendered":"https:\/\/cyberlorenzo.tech\/?p=52"},"modified":"2022-05-12T22:42:49","modified_gmt":"2022-05-12T22:42:49","slug":"project-one-continued","status":"publish","type":"post","link":"https:\/\/cyberlorenzo.tech\/?p=52","title":{"rendered":"Enumerating and Exploiting SMB – Continued"},"content":{"rendered":"\n
\n
\n
\"\"<\/figure>\n<\/div>\n\n\n\n
<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n

Here we opened the ssh directory and found a list of keys. The most important key here that we want to download and copy is the “id_rsa” key. This is our private key. We want to grab this key instead of the other because this key is used to authenticate oneself when coming in contact with the public key data creating a key pair. Essentially as long as we have the private key we can authenticate in whichever parts of the SMB we would like.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Here we are changing the permissions in order to write the id_rsa file into our .ssh folder using chmod 600 [file]<\/mark><\/code><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Next, using the cp -b [file] \/root\/.ssh<\/mark> <\/code>we copied our private key to our local ssh directory. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Using the last name of the employee John Cactus during the enumeration phase we were able to gain access to his account. <\/p>\n\n\n\n

This goes to show that proper configurations must be made or bits and pieces of information can be put together to exploit these systems. <\/p>\n\n\n

\"\"<\/a><\/div>","protected":false},"excerpt":{"rendered":"

Here we opened the ssh directory and found a list of keys. The most important key here that we want to download and copy is the “id_rsa” key. This is our private key. We want to grab this key instead of the other because this key is used to authenticate oneself when coming in contact […]<\/p>\n","protected":false},"author":1,"featured_media":236,"comment_status":"open","ping_status":"open","sticky":false,"template":"templates\/right-sidebar.php","format":"standard","meta":{"saved_in_kubio":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-52","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-project-one"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts\/52","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=52"}],"version-history":[{"count":4,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions"}],"predecessor-version":[{"id":139,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions\/139"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/media\/236"}],"wp:attachment":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=52"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=52"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=52"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}