EricLuec — Cyber Toolbox

0 D 9 5 4 F A 8 2 F 0 4 3 0 1 D 4 D B D 9 F E 9

8 5 1 8 0 1 8 0 A 4 2 E B E 6 3 1 1 F 6 E 1 9 B

B C B 4 1 4 5 B 3 F 0 F 5 0 9 2 7 A C C F 4 8 5

6 B 4 3 A F 6 6 A D A D E 0 7 E 2 1 4 5 8 1 7 F

2 4 5 D 4 A 1 0 F 2 0 5 7 B C 3 1 1 C F D A 3 3

0 6 1 7 4 B 2 6 0 D 5 E 3 B 6 B E D 8 5 F D 3 E

6 2 7 5 0 E F 9 7 A 9 3 A E 4 7 D 1 E E F E C 2

7 2 4 8 7 7 1 8 E A 7 A 8 6 A 8 5 A 1 F 4 0 D C

7 A 2 9 6 1 A 5 2 7 A 4 8 7 E 1 2 1 6 2 2 2 2 C

2 9 0 6 6 A 8 6 3 8 3 4 8 7 F C 2 D D 7 0 2 0 1

2 D 0 C 9 B B 2 2 2 4 0 B 0 3 A D 7 E 0 3 C D A

5 1 2 8 F 0 A 8 1 8 E 9 E 7 9 9 B 7 0 9 9 F 2 8

C 7 4 B 8 1 D 2 B 9 B D 8 C E E C A 2 0 2 B 0 4

0 B 5 2 F 9 1 4 D C 3 E C 4 8 2 E C E 6 A 4 A E

B 7 D 1 4 9 A E 9 7 C 6 7 1 8 E 8 C 9 4 8 5 4 4

E E 8 6 0 2 4 7 0 0 E 1 E 1 E 4 A 2 4 E 5 2 F 7

C E 6 9 8 3 A 2 3 0 2 5 4 E B 6 A 5 8 7 4 A 9 E

6 8 A 6 A 0 0 0 1 D 0 A 3 6 8 8 7 D D E A C 2 B

CYBER TOOLBOX v3.0|OPERATIONAL

8 TOOLS|THREAT: 4.2/10

Available Tools

guest@cyber-toolbox ~ network-scanner

$ ./network-scanner --target 10.0.0.0/24

[*] Scanning 256 hosts...

[+] 10.0.0.1 gateway 5 ports open

[+] 10.0.0.10 web-server 3 ports open

[+] 10.0.0.42 database 2 ports open

[+] 10.0.0.77 dev-box 4 ports open

[*] OS fingerprint: Linux 5.15 (3 hosts)

[*] Scan complete: 4 hosts found in 2.1s

guest@cyber-toolbox:~$

Pentest Workflow● Recon

Recon

dns-lookup → subdomain-enum

4 subdomains

Scan

network-scanner → port-analyzer

6 ports / 4 hosts

Analyze

vuln-assessor → header-inspector → ssl-checker

2 CVEs, 3/5 hdrs

Exploit

hash-cracker

md5 cracked 0.3s

Security Scorecard

Threat Assessment

Network

SECURE

Web App

MODERATE

SSL/TLS

SECURE

DNS

MODERATE

Headers

CRITICAL

Passwords

MODERATE

Threat Level4.2/10

CVE Vulnerability Log

[CRITICAL] CVE-2024-1234 — nginx 1.24 remote code execution (CVSS: 9.8)

[CRITICAL] CVE-2024-2081 — Log4Shell variant in logging framework (CVSS: 10)

[HIGH] CVE-2024-3390 — kernel privilege escalation via eBPF (CVSS: 8.4)

[MEDIUM] CVE-2024-5678 — OpenSSH 8.9 privilege escalation (CVSS: 6.1)

[MEDIUM] CVE-2024-6012 — PostgreSQL SQL injection in json_path (CVSS: 5.9)

[MEDIUM] CVE-2024-7744 — Node.js HTTP request smuggling (CVSS: 5.3)

[LOW] CVE-2024-8001 — curl verbose mode info disclosure (CVSS: 3.7)

[LOW] CVE-2024-8899 — OpenSSL timing side-channel leak (CVSS: 2.6)

[LOW] CVE-2024-9100 — redis ACL bypass in debug mode (CVSS: 3.1)

[CRITICAL] CVE-2024-0042 — glibc buffer overflow in DNS resolver (CVSS: 9.1)

Scan History Timeline

Mar 24Full Scan12 findings

Mar 20Port Scan3 findings

Mar 15Vuln Assessment8 findings

Mar 10Header Check2 findings

Mar 5SSL Audit0 findings

Feb 28Network Scan5 findings

Live Packet Capture · eth0● capturing

#TimeSourceDestinationProtocolLenInfo

100.00010.0.0.4210.0.0.1DNS78A api.target.com

200.41010.0.0.110.0.0.42DNS9493.184.216.34

300.82010.0.0.4293.184.216.34TCP7449214 → 443 [SYN]

401.23093.184.216.3410.0.0.42TCP74443 → 49214 [SYN, ACK]

501.64010.0.0.4293.184.216.34TLS583Client Hello (SNI)

602.05093.184.216.3410.0.0.42TLS1494Server Hello, Cert

702.46010.0.0.4293.184.216.34HTTPS412GET /api/v1/items

802.87093.184.216.3410.0.0.42HTTPS1872200 OK · 1.6 KB JSON

903.28010.0.0.4210.0.0.10SSH116Encrypted (AES256)

1003.69010.0.0.1010.0.0.42SSH84Encrypted (AES256)

1104.10010.0.0.42224.0.0.251UDP165mDNS query · _http._tcp

1204.51010.0.0.428.8.8.8ICMP98Echo request · seq 14

1304.9208.8.8.810.0.0.42ICMP98Echo reply · 12.4ms

1405.330ff:ff:ff:ff10.0.0.0/24ARP42Who has 10.0.0.77?

14 packets shown5284 bytes captured0 dropped

Attack SimulationRUNNING...

Next Project

Image Gallery