1. scan for open ports nmap 10.10.10.10 -vvv

  2. Samba - network file system -based on client/server protocol of server message block (SMB) -SMB is developed only for windows -Samba allows for interoperability for linux and unix nmap -p 445 —script=smb-enum-shares.nse,smb-enum-users.nse 10.10.10.10

  3. connect to smbclient smbclient //10.10.10.10/anonymous

  4. enumerate RPC (remote procedure call) nmap -p 111 —script=nfs-ls,nfs-statfs,nfs-showmount 10.10.10.10

  5. ProFtpd - free open source FTP server - compatible with unix and windows systems nc 10.10.10.10 21 search for exploits based on version number

  6. transfer id_rsa using SITE CPFR and SITE CPTO

  7. SUID-user executes the file with permissions of the file owner SGID-user executes with the permission of group owner, file created in directory gets the same group owner Sticky Bit-users are privented from deleting files from other users

find /-perm -u=s -type f 2>/dev/null