ports are as follows:
631 service: ipp
3306 service: mysql
6000 service: X11
can u recommend any reading sources? (i will try google)
The best reading source with a great hands on experience would be the offsec training.
Originally Posted by benzslr123
Besides that you maybe want to start with Syngress "Penetration Testers Open Source Toolkit" or "Gray Hat Hacking". Just some suggestions but once you get into it you will know which books will be of the most interest to you.
im trying to connect to a vista box with port 554,445,135,139 open.
But all i get when i send smbclient -L Victim is "error returning browse list: NT_STATUS_ACCESS_DENIED"
i cant see my shares, am i able to upload a file anyway?
It is a vista home premium 6001 sp1.
There are many vulnerabilities you could take advantage of. It equates to knowing your machine and operating systems.
For instance, the Vista machine, you could use the ani chunk exploit on the BT4 box, setting that up as your server, poison the network, re-directing the Vista box to your BT4 when it tried to browse to say, google.com. and there you will be prompted for a reverse shell...
But I would say, find out what ports are open, use the "A" option in Nmap to find services and version, research those. Find a vulnerability in something, and go from there. 75% of hacking is research.
SSh port open
OK so i tried using the ssh <ip address> command and it asked for password. is there any other way to get the pass besides brute force?