As always in every penetration testing engagements we start by reconnaissance and information gathering, in this step we try to get as much information about the target as possible.

We can achieve that by using various of tools and techniques to obtain foothold on the target, by using enumeration, scanning and other recon techniques.

In this lab we are tasked to pentest this Linux Lab : Image on Offsec’s Proving grounds :

First step will be to check if the target is up and running, we could do so by sending ICMP requests to check if we can communicate with the target by running this command :

Next I’ll run rustscan to quickly scan for the open ports on the target:

From there I can find two open ports :

80 and 22

After some researching and searching for the target ImageMagick with the version : “Version: 6.9.6–4”