Hacking the Sunset Dusk Vulnerable VM
Irfan Shakeel
I am on a mission to create a secure cyber world ???| Director @ CIP Cyber | Creating ICS/OT Security Content ????
Sunset: dusk is a vulnerable by design Debian based machine created by whitecrOwz. It is available on https://www.vulnhub.com
This machine is ranked as a beginner VM, so it is very much useful for those pentesting learners who have just started to get hands on practice.
We will take an advantage of the vulnerabilities present in this machine i.e. weak credentials which let us inject the PHP file for exploiting Remote Code Execution.
After importing Sunset: dusk on VirtualBox, start the VM:
Network Scanning
As we don’t know the IP address of this VM we will get back to our attacking machine i.e. Kali Linux and use netdiscover command to identify the target machine’s IP.
We got the IP of the target machine now, we will perform information gathering by scanning the target IP to identify all the loopholes and open ports of the victim.
Use Nmap tool to scan the target: # nmap 192.168.0.114 -A
