part 2:

well there it was. I was on an older Linux kernel and nmap --interactive. damn... hours, folks... hours.

moral of the story that really is well known but not adhered to... it's not about the exploit, it's about the misconfigurations.

I'm sure we have all had those moments but damn if it ain't frustrating.

I sat on a box last night and it was pushing me to throw in the towel and go to bed. it kept eating at me, "I'd seen this before!" I thought to myself but I just could not get the escalation. kernel exploit after kernel exploit being thwarted by account limitations.

exploit-db has an extreme issue with proper documentation. spent 2 hours fixing a gcc issue in the blind, so to speak.

this box was haunting me, y'all.

then it hit me, "mistakes and misconfigurations". where are they?

literally went "fuck it mode" in the #pwk lab yesterday and popped all boxes with exposed 445 (in the public network minus two that are not exposing pipes)... thank you nsa for the useful tool.

can't use them all for the lab write ups but it felt pretty bad ass to knock down that many boxes in the span of 5 minutes.

now after web apps, again. need to focus on diversifying my LFI/RFI skillset.