Summary of Conducting Basic Pentesting - TryHackMe Basic Pentesting Walkthrough

00:00:00 - 00:20:00

This video provides a walkthrough of how to conduct basic pentesting on a computer, starting with scanning for vulnerabilities and enumerating services and devices, and then exploring the web server. Once the web server is explored, the author demonstrates how to use brute force to find the username and password of the user "k." Finally, the video discusses how to try to login to a server and find out the password, if possible, and how to escalate privileges to root.

• 00:00:00 In this video, a TryHackMe machine is used to walk through basic Pentesting steps, such as scanning for vulnerabilities, enumerating services and devices, and exploring web servers.
• 00:05:00 In this video, a basic pentesting walkthrough is provided, starting with ls and walking through the use of smb to retrieve a file from an anonymous directory on a server. Once the file is retrieved, the walkthrough concludes with a discussion of the web server and the username and password of the user "jane." Finally, the walkthrough demonstrates the use of brute force to find the username and password of user "k."
• 00:10:00 In this basic Pentesting walkthrough, the author demonstrates how to conduct password cracking on the Juicer. They first crack the password for user j and then for user k. They also demonstrate how to export a key file's RSA key and login to the machine with the key file's password.
• 00:15:00 This video discusses how to try to login to a server and find out the password, if possible. The user chain is then used to escalate privileges to root.
• 00:20:00 This video teaches how to conduct basic pentesting on a computer. The first step is to identify the user account that is currently logged in. Next, the user can run all commands on the computer. Finally, the user can become root and see how the commands change.