↓Skip to main content

RWHOIS

OFFSEC - Proving Grounds - ARIN
·2673 words·13 mins
OFFSEC PG PRACTICE WHOIS LOCAL SMTP SERVER FAIL2BAN RWHOIS
Port 43 WHOIS and an ARIN web app expose registered data. After signup, SMTP receives the link. RWHOIS manipulation and a Fail2Ban tilde escape enable RCE and root access.