Prepping for OSCP: Walkthrough for LazySysAdmin
Prepping for OSCP: Walkthrough for LazySysAdmin With a request in for approval to start my OSCP training, I decided I should probably get started on some write-ups for the VulnHub VMs I've done. So without further ado, here is my guide for how I rooted LazySysAdmin: Discovery The first step to any engagement, is to know in which network you will be working. To figure this out, I ran an ifconfig to see which IP address I pulled from DHCP: Figure 1 IP Address of Attacking Machine So it looks like I’ll be working in the 192.168.56.0/24 subnet. With this information in hand, I could look for other hosts on this subnet using netdiscover: Figure 2 Netdiscover Results with Hosts As you can see in Figure 2, there are a couple of hosts on the network. 192.168.56.1 is the gateway, with 192.168.56.100 being the DHCP server and 192.168.56.101 being our target machine. Enumeration With the network mapped out, it was time to see what was open on our ta...