The document discusses HackTheBox (HTB), a website for penetration testing and cyber security training. It provides reasons for using HTB, including that it is interesting and helps improve penetration testing skills. It also lists some common tools used for hacking like Nmap, BurpSuite, and ExploitDB. The document emphasizes that learning is a continuous process and recommends practicing different hacking techniques.

1. 想知道嗎？ 2020/12/31
Jeff
1/2/2021
0

2. HackTheBox（HTB） 介紹
踏上旅程 - 取得邀請碼
滲透流程
實戰
心得
1/2/2021 1

3. 1/2/2021 2
https://hackthebox
Why HTB?
 有趣
 練滲透測試能力
 拓展滲透測試思維

4. 1/2/2021 3https://hackmd.io/StosQIM8Qf2DhUkycL1vbw?view
https://www.hackthebox.eu/invite
可以透過上面的連結動手玩玩看 XD
Payload1: https://www.hackthebox.eu/api/invite/how/to/generate
Payload2: https://www.hackthebox.eu/api/invite/generate

5. 1/2/2021 4
https://hitcon.org/2017/CMT/slide-files/d2_s3_r4.pdf
Google Hacking
Shodon
Maltego
…
Nmap
Nikto
BurpSuite
ZAP
…
ExploitDB
…
Hitcon ZeroDay
CVE …
就像交男/女朋友 XD

6. 1/2/2021 5
https://www.hackthebox.eu/home/machines/profile/18

7. 1/2/2021 6
https://ithelp.ithome.com.tw/articles/10246385?sc=hot
Nmap

8. 1/2/2021 7
https://ithelp.ithome.com.tw/articles/10246385?sc=hot
Sql-Injection 打進去

9. 1/2/2021 8
https://ithelp.ithome.com.tw/articles/10246385?sc=hot
SetUID

10. 1/2/2021 9
https://ithelp.ithome.com.tw/articles/10246385?sc=hot

11. 1/2/2021 10
https://ithelp.ithome.com.tw/articles/10246385?sc=hot
export PATH=`pwd`:$PATH

12. 1/2/2021 11
滲透測試各種技巧 – 學不完，持續學
提權更是結合各種花式技巧(e.g. 各種 Overflow)

13. 1/2/2021
12

14. 1/2/2021
13

15. 1/2/2021
14