I have moved to Yuma, Arizona. I finally got my laptop and settled in. Now I can start blogging again. The first post I will be making as I am getting back into the network is going on THM doing a Nmap room. After that it is on to figuring out what certification I want to obtain. I have also obtained my CCNA. Now on to studying.
I have learned how to use WSL on Windows to get Kali Linux. It was bareboned so i had to use: sudo apt install kali-linux-everything
This is how to manually subnet IPv4 Class C addresses.
Class C:
Range: 192.0.0.0 to 223.255.255.255
Default Subnet Mask: 255.255.255.0
CIDR: /24
Question: You are assigned 192.168.8.0/24. I need 5 networks and 20 host per network.
Step 1:
Create Table (Sunny Subnetting Table)
Subnet 1 2 4 8 16 32 64 128 256
Host 256 128 64 32 16 8 4 2 1
Subnet Mask /24 /25 /26 /27 /28 /29 /30 /31 /32
Step 2:
Find 5 networks (subnet) closest but not under and write it down.
Subnet 8
Host 32 total hosts including network id and broadcast id
Subnet Mask /27 (new subnet mask)
Step 3:
Create second table and number by subnets from step 2.
Original Network ID: 192.168.8.0/24
# Network ID Subnet Mask Host ID Range # of Useable Hosts Broadcast
1
2
3
4
5
6
7
8
Step 4:
Add Original Network ID to the table
# Network ID Subnet Mask Host ID Range # of Useable Hosts Broadcast
1 192.168.8.0
2
3
4
5
6
7
8
Step 5:
Add Host from step 2 to the last network id octet
# Network ID Subnet Mask Host ID Range # of Useable Hosts Broadcast
1 192.168.8.0
2 192.168.8.32
3 192.168.8.64
4 192.168.8.96
5 192.168.8.128
6 192.168.8.160
7 192.168.8.0192
8 192.168.8.224
Step 6:
Put subnet mask from step 2 into subnet mask
# Network ID Subnet Mask Host ID Range # of Useable Hosts Broadcast
1 192.168.8.0 /27
2 192.168.8.32 /27
3 192.168.8.64 /27
4 192.168.8.96 /27
5 192.168.8.128 /27
6 192.168.8.160 /27
7 192.168.8.0192 /27
8 192.168.8.224 /27
Step 7:
Put Host from step 2 into # of useable hosts. You must subtract it by 2 for network id (first host) and broadcast id (last host)
# Network ID Subnet Mask Host ID Range # of Useable Hosts Broadcast
1 192.168.8.0 /27 30
2 192.168.8.32 /27 30
3 192.168.8.64 /27 30
4 192.168.8.96 /27 30
5 192.168.8.128 /27 30
6 192.168.8.160 /27 30
7 192.168.8.0192 /27 30
8 192.168.8.224 /27 30
Step 8:
Subtract 1 from last octet from network id and put in broadcat id and last broadcast is is .255
# Network ID Subnet Mask Host ID Range # of Useable Hosts Broadcast
1 192.168.8.0 /27 30 192.168.8.31
2 192.168.8.32 /27 30 192.168.8.63
3 192.168.8.64 /27 30 192.168.8.95
4 192.168.8.96 /27 30 192.168.8.127
5 192.168.8.128 /27 30 192.168.8.159
6 192.168.8.160 /27 30 192.168.8.191
7 192.168.8.0192 /27 30 192.168.8.223
8 192.168.8.224 /27 30 192.168.8.255
Step 9:
Input Host id range. Add 1 from network id and subtract 1 from broadcast id.
# Network ID Subnet Mask Host ID Range # of Useable Hosts Broadcast
1 192.168.8.0 /27 192.168.8.1 to 192.168.8.30 30 192.168.8.31
2 192.168.8.32 /27 192.168.8.33 to 192.168.8.62 30 192.168.8.63
3 192.168.8.64 /27 192.168.8.65 to 192.168.8.94 30 192.168.8.95
4 192.168.8.96 /27 192.168.8.97 to 192.168.8.126 30 192.168.8.127
5 192.168.8.128 /27 192.168.8.129 to 192.168.8.158 30 192.168.8.159
6 192.168.8.160 /27 192.168.8.161 to 192.168.8.190 30 192.168.8.191
7 192.168.8.0192 /27 192.168.8.193 to 192.168.8.222 30 192.168.8.223
8 192.168.8.224 /27 192.168.8.225 to 192.168.8.254 30 192.168.8.255
Step 10:
You can assign any 5 out of 8 subnets. 3 are going to waste.
Reference:
Youtube: Sunny Classroom subnetting is simple
ITPROTV IP Addressing: IPv4 Subnetting Class C
This is how you find a Spanning Tree Protocol Root Bridge Election.
This example is with three switches.
Step 1:
Lowest priority will become root bridge, if equal lowest MAC Address will become root bridge.
Step 1A:
If you want to manually make a switch root bridge, change its priority by multiples of 4096.
Step 2:
All root bridge ports will become forwarded and a designated port. There can only be one designated port per segment.
Step 3:
Find root port (the lowest cost going back to root bridge) root ports can't be blocked. There can only be one designated root port per segment (switch to switch.)
Step 3A:
When another switch has same priority, same MAC address, use the CLI to find root port.
enable <enter>
show spanning-tree <enter>
look at priority.nbr lowest will become root port.
Step 4:
For final designated port look at cost as if forwarding from that port to root bridge. If equal continue to priority, and then MAC Address. Lowest wins designated port.
Step 5:
If you have a root port on a switch complete it, and it must be a blocked alternate port.
enable <enter>
show spanning-tree <enter>
This bridge is the root
Reference: ITVPRO.TV Cisco CCNA - Cisco Switching: STP Operations
I have finished my exam and passed will write a spoiler-free guide today.
I am about to start my eJPT certification. I will write about it after it is complete and I pass.
I will be starting to start developing reports. This will be without pictures, proof of concept, for now to make sure my writing is getting better. The methodology I will be using is from eLearnSecurity which is:
1. Engagement
2.Information Gathering
3. Footprinting & Scanning
4. Vulnerability Assessment
5. Reporting
Note: This is from a lab. I will be using Kali Linux, if you want to know the version look below.
grep VERSION /etc/os-release <enter> search the OS version in the specified file
1. Engagement
I am going to VPN into the network. During this step, I will get information for the IP address that I will be going for. I will get a contract signed for the IP address that I will be knowing the rules of engagement. Since this is a VPN machine that I will be attacking I will be downloading the VPN filename.
cd Downloads <enter> to change to Downloads directory
ls <enter> list the files and folders in the directory I am in. I like to use the flags lash to get a long list of all files, folders, and hidden files, the size of the file, and finally have it human-readable.
sudo openvpn (filename) <enter> I wait until I see (Initialization Sequence Completed) to know that I am connected to the VPN.
2.Information Gathering
With gathering information and knowing that we are on the network. I will start with Network Config.
ip addr <enter> I will look for tap 0 inet
3. Footprinting & Scanning
I will use nmap and will have to use sudo to properly execute. I will find the ports that are opened. I check for telnet and ssh credentials using hydra. If you cant use rockyou-10.txt, remember to verify where it is. Now it is located at: /usr/share/SecLists/Passwords/Leaked-Databases/rockyou-10.txt
4. Vulnerability Assessment
I've gotten root's user and pass from hydra. I then SCP into my local directory users and pass.
sudo unshadow passwd shadow > Brute <enter> put the hash of the two files into one file named Brute
cat to Brute <enter> displays the Brute file
sudo john Brute <enter> crack the hashes of filename Brute with john
ex.) asd (Larry) {the parenthesis is the user}
pass (user)
5. Reporting
The tools I used are as follows:
Kali Linux
Command Line: telnet, ssh, scp
nmap
hydra
john
If you want to learn more or want more in-depth report, leave a comment. I purposely left out the CLI for nmap, hydra, loggin in to telnet, scp, and ssh.
I am steadily learning by doing labs on E-LearnSecurity. I am planning on taking the eJPT and passing it before November 1, 2020. I have completed some of the labs, and look forward to completing the final six so I can go find another certificate to conquer. I have been learning about Sqli, cross-site scripting, gobuster, and nmap to name a few. I am still contemplating on OSCP or PTP, I have more research still to do.
