Update README.md

This commit is contained in:
Domenico Del Giudice 2025-03-02 14:04:38 +01:00 committed by GitHub
parent 95036e32dc
commit 0ea6df7b8b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -324,7 +324,7 @@ nmap -sV <indirizzo-IP> # Service version detection
<br>
<br>
**Testing (ModBusSploit) 🛠️**
#### **Testing (ModBusSploit) 🛠️**
In this section, we will perform tests on the **[ModBusSploit](https://github.com/C4l1b4n/ModBusSploit/)** tool to simulate attacks on the Conpot honeypot.
@ -355,19 +355,18 @@ python3 start.py
3. **Result on Kibana dashboard:**
<img width="1188" alt="kibana_dash" src="https://github.com/user-attachments/assets/de9c841b-830d-42d9-b778-61c270cc9c8c" />
<br>
<br>
<br>
**Brute force attack examples using Hydra:**
### **Brute force attack examples using Hydra:**
```sh
hydra -l <utente> -P <file_wordlist> ssh://<indirizzo-IP>
hydra -l <utente> -P <file_wordlist> ftp://<indirizzo-IP>
hydra -l <utente> -P <file_wordlist> http-get://<indirizzo-IP>
```
**Exploitation example using Metasploit:**
### **Exploitation example using Metasploit:**
```sh
msfconsole
use exploit/linux/ssh/sshexec
@ -377,17 +376,17 @@ set PASSWORD <password>
exploit
```
**Example of an XSS attack using curl:**
### **Example of an XSS attack using curl:**
```sh
curl -X POST -d "username=<script>alert('XSS')</script>" http://<indirizzo-IP>/login
```
**SQL injection example using sqlmap:**
### **SQL injection example using sqlmap:**
```sh
sqlmap -u "http://<indirizzo-IP>/page?id=1" --risk=3 --level=5
```
**Netcat example to connect to port 80 (HTTP):**
### **Netcat example to connect to port 80 (HTTP):**
```sh
nc -v <indirizzo-IP> 80
```