Skip to content

Commit f8ae4fc

Browse files
Update LinuxCheatSheet
--Removed WireShark Filters and made it it's own file --Add GoBuster command
1 parent b79c844 commit f8ae4fc

File tree

1 file changed

+15
-84
lines changed

1 file changed

+15
-84
lines changed

LinuxCheatSheet

+15-84
Original file line numberDiff line numberDiff line change
@@ -180,7 +180,7 @@ SMBMap allows users to enumerate samba share drives across an entire domain. Lis
180180
"smbmap -H <IP>"
181181
===========================================================================================================================
182182
Nmap:
183-
Best 12 Nmap command examples:
183+
Top 13 Nmap command examples:
184184

185185
1. Basic Nmap Scan against IP or host
186186
"nmap 1.1.1.1"
@@ -251,14 +251,23 @@ The “-iL” parameter lets you read from that file, and scan all those hosts f
251251

252252
12: FTP brute force attack:
253253
"nmap --script ftp-brute -p 21 192.168.1.105"
254+
255+
13: Scan for MySQL on port 3306
256+
"nmap 10.10.10.50 -p 3306"
254257

255258

256259

257260

258-
===========================================================================================================================
261+
=========================================================================================================
259262
How to look up IP Address for a website:
263+
260264
nslookup www.whateversite.com
261-
===========================================================================================================================
265+
=========================================================================================================
266+
How to pull a file using Burpsuite:
267+
268+
in a Repeater tab, at the bottom of the request header type:
269+
'url=file:///etc/passwd'
270+
=========================================================================================================
262271
#Gobuster:
263272
Common Command line options
264273

@@ -295,6 +304,8 @@ Command line options for dir mode
295304
-U <username> – HTTP Authorization username (Basic Auth only).
296305
-to <timeout> – HTTP timeout. Examples: 10s, 100ms, 1m (default: 10s).
297306
"gobuster dir -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt -u https://10.10.10.84"
307+
308+
gobuster vhost -w /opt/SecLists/Discovery/DNS/subdomains-top1million.txt -u http://forwardslash.htb
298309
===========================================================================================================================
299310
Nikto:
300311

@@ -775,7 +786,7 @@ Available Medusa Modules:
775786
===========================================================================================================================
776787
SQLmap:
777788
sqlmap -r search.req --batch --force-ssl
778-
sqlmap -r login.req --batch --force-ssl
789+
sqlmap -r login.req --batch --force-ssl461
779790
-'search.req = info from search bar results using BurpSuite Repeater using 'Copy to File'
780791
-'login.req = info from login screen using results from BurpSuite Repeater using 'Copy to File'
781792
===========================================================================================================================
@@ -789,83 +800,3 @@ or
789800
airmon-ng check kill
790801
airmon-ng start wlan0
791802
===========================================================================================================================
792-
793-
===========================================================================================================================
794-
Wireshark Filters:
795-
796-
797-
Filtering traffic from one server:
798-
799-
ip.addr eq <IP>
800-
801-
Filtering traffic between two servers:
802-
803-
ip.addr eq <IP1> and ip.addr eq <IP2>
804-
805-
Filtering traffic of standard protocols:
806-
807-
smtp
808-
809-
ldap
810-
811-
ssl
812-
813-
http
814-
815-
dns
816-
817-
Filtering an SMTP conversation between two servers:
818-
819-
ip.addr eq <IP1> and ip.addr eq <IP2> and smtp
820-
821-
Filtering an HTTP conversation between two servers:
822-
823-
ip.addr eq <IP1> and ip.addr eq <IP2> and http
824-
825-
Filtering an SMTP Conversation with TLS between two servers:
826-
827-
ip.addr eq <IP1> and ip.addr eq <IP2> and ssl
828-
829-
Filtering outgoing packets from ona particular IP:
830-
831-
ip.src eq <IP>
832-
833-
Filtering incoming packets from one particular IP:
834-
835-
ip.dst eq <IP>
836-
837-
Filtering the number of SMTP sessions:
838-
839-
smtp.req.command eq QUIT
840-
841-
Filtering the number of transmited mails:
842-
843-
smtp.req.command eq MAIL
844-
845-
Filtering the number of recipients in an SMTP conversation:
846-
847-
smtp.req.command eq RCPT
848-
849-
Filtering a specific recipient mailbox:
850-
851-
smtp.req.command eq RCPT and smtp.req.parameter contains “[email protected]
852-
853-
Filtering a specific sender mailbox:
854-
855-
smtp.req.command eq MAIL and smtp.req.parameter conatains “[email protected]
856-
857-
Filtering SMTP errors:
858-
859-
If you know the error code then use this filter:
860-
861-
smtp.response.code eq <ERROR_CODE>
862-
863-
for example: smtp.response.code eq 421
864-
865-
If you don’t know it, or if you want to list all SMTP errors in the SMTP sessions, then you must first exclude all the valid codes (2XX) until you end up only with 4XX or 5XX codes.
866-
867-
not smtp.response.code eq 220 and not smtp.response.code eq 221 and not smtp.response.code eq 250 and not smtp.response.code eq 354 and smtp.response.code
868-
869-
When you execute this filter you will end up only with 4XX and/or 5XX error codes so you will see all SMTP errors withing your capture. If it ends up blank, it means that no SMTP errors were found in that specific capture.
870-
871-
===========================================================================================================================

0 commit comments

Comments
 (0)