Finding interesting information on unsed machines

[wiseguy01]

Hello all,

last year I was working as a pentester for a company located in middle east. By bruteforce I discovered a printer machine and when I went to look around I found out it was the old computer used by the secretary of the CEO and I happily exfiltrated all the data to a USB drive. and on the 5th floor printer I found network maps for the entire company. My point is always look at a machines files before moving on to the next machines in the network.

Thanks,
WG01

 

[build_ext]

Hello all,

last year I was working as a pentester for a company located in middle east. By bruteforce I discovered a printer machine and when I went to look around I found out it was the old computer used by the secretary of the CEO and I happily exfiltrated all the data to a USB drive. and on the 5th floor printer I found network maps for the entire company. My point is always look at a machines files before moving on to the next machines in the network.

Thanks,
WG01

With all due respect you don't have to tell people to do this, it's chapter one, rule one of any red team/pentesting book. If you are a pentester then you will have a lot of cool shit to post about so I suggest posting some of that instead of telling people who play tennis how to hold the racket. For some inspiration (not that you need it if you've got the t-shirt) then see this post for an example of a good write-up:

https://xss.pro/threads/53807/

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

При всем уважении, вам не нужно говорить людям, чтобы они это делали, это глава первая, правило первое в любой книге красной команды / пентестинга. Если вы пентестер, то у вас будет много крутого дерьма, о котором можно написать, поэтому я предлагаю опубликовать кое-что из этого, вместо того, чтобы рассказывать людям, которые играют в теннис, как держать ракетку.
Для некоторого вдохновения (не то, чтобы вам это нужно, если у вас есть футболка), посмотрите Этот пост для примера хорошей статьи:

https://xss.pro/threads/53807/