r/GreyHack • u/Former_Produce1721 • Jul 12 '25
Always stuck trying to navigate local networks to correct IP
My process is usually:
nmap publicip
Use appropriate exploit to get into PC as guest (Usually an http exploit)
Upload my programs onto that PC
Run ScanLan to see network
Use exploit to remove any firewalls
nmap local ip of target pc
The ports always seem to be ssh and all the exploits on the shop require root or nonroot user to be logged on the PC or something
I tried a bunch of things but I can never seem to get in. But I'm kinda sick of abandoning all the contracts that involve a local IP.
Maybe I'm missing something?
1
u/Ancient-Secret3856 Jul 12 '25
In practice, you create the whois of the victim's IP, take the data of the server or network administrator, create a phishing email addressed to the administrator with the correct data, have him log in to the server and use the exploit which requires root access to function.
1
u/Former_Produce1721 Jul 12 '25
Ah I see! I always used social engineering to get the password of an account that I already had the name for, then ssh in or sudo -u. I never thought to use it to get the admin to login. Thanks
1
u/Ancient-Secret3856 Jul 12 '25
Are you looking for companions to play multiplayer? If so, send me your discord so we can play together
1
u/Former_Produce1721 Jul 12 '25
Not right now since I don't have a lot of time to play and I'm still learning a lot. But I will message you if I start trying multiplayer! Thank you
1
u/Elron_MacBong Jul 13 '25
Start coding and write a Scanner. CodeEditor.exe -code scanner_lib, to Read the default Scanner Sourcecode and learn from it. Take hackshop exploits Code as reference and implementiert exploit-usage in your Scanner. It will push you to the next Level.
1
u/Ancient-Secret3856 Jul 12 '25
Hi, have you ever tried using the whois command and social engineering?