Simple technique about how to run password spraying.
we need to ask the customer what is the company password policy?
It's very important to know that before start doing Penetration Testing.
In kali linux we need to create a users, passwords lists
sudo nano uers.txt
sudo nano pass.txt
sudo nano targets.txt
We need to specify the live and open ports in the target system
ipcalc to idenfy the subnet
ipcalc 10.0.0.0
netdiscover -r 10.0.0.0/24
nmap -n -sn 10.0.0.0/24
service postgresql start
msfconsole
search http_login for right module etc .....
Thanks
No comments:
Post a Comment