OPSECTLAS you are here: Network
Network

Proof Capture & Documentation

reference 4 commands

  1. Recon
  2. Enumerate
  3. Foothold
  4. PrivEsc
  5. Lateral
  6. Post-Ex
Linux (low-priv proof)

Capture proof before doing anything else

hostname && id && ifconfig && cat /home/*/local.txt 2>/dev/null
Linux (root proof)
hostname && id && ifconfig && cat /root/proof.txt
Windows (user proof)
hostname && whoami && ipconfig && type C:\Users\<USER>\Desktop\local.txt
Windows (Administrator/SYSTEM proof)
hostname && whoami && ipconfig && type C:\Users\Administrator\Desktop\proof.txt
Screenshot Checklist
ItemCommand
Proof file contentscat /root/proof.txt or type proof.txt
Current user + privilegesid or whoami /all
Hostnamehostname
IP addressip a or ipconfig
Initial exploitation commandScreenshot your shell coming back
Documentation Template Per Machine
template
TARGET
<IP>
OS
<detected>
OPEN PORTS
<list>
INITIAL FOOTHOLD
<service> via <vuln/method>
PRIVESC
<method used>
PROOF
<hash or content>
CREDS FOUND
<user:pass>
NOTES
<anything unusual>