Vulnhub Nasef Walkthrough2021-03-16 23:27:21
https://www.vulnhub.com/entry/nasef1-locating-target,640/scan files at port 80.wget goodmat.txt, get a username and ssh key file.decrypt encrypted ssh key.log in ssh.find writable file.add new root account to /etc/passwd.root@nasef1:~# id;hostna
Vulnhub Gaara Walkthrough2021-03-15 15:00:35
https://www.vulnhub.com/entry/gaara-1,629/Scan port 80, find Cryoserver.┌──(kali㉿mykali)-[~/Documents/gaara]
└─$ curl http://192.168.56.78/Cryoserver | sed '/^$/d'
% Total %&n
Vulnhub ICMP: 1 Walkthrough2021-03-13 09:41:38
https://www.vulnhub.com/entry/icmp-1,633/Scan ports, find 22 and 80.┌──(kali㉿mykali)-[~/Documents/icmp]
└─$ nmap -sV -sC -p- 192.168.56.81 -oN ports.log
...
PORT STATE SERVICE VER
Vulnhub System Failure Walkthrough2021-03-12 22:34:26
https://www.vulnhub.com/entry/system-failure-1,654/Scan ports.# Nmap 7.91 scan initiated Thu Mar 11 21:49:07 2021 as: nmap -sV -sC -p- -oN ports.log 192.168.56.80
N
Vulnhub The Office: Doomsday Device done!2021-03-11 18:22:53
https://www.vulnhub.com/entry/the-office-doomsday-device,627/Very interesting machine.Recommand you the writeup by ghost26082012 here:https://youtu.be/-DVdXBGf35w
Vulnhub hacksudo: 1 Walkthough2021-03-08 11:27:47
https://www.vulnhub.com/entry/hacksudo-1,650/Simple walkthrough.Scan ports.Scan port 80, check each file's source code, but nothing useful.Port 8080 is tomcat, with default creds. Use msfconsole to get reverse shell.Now we are user tomcat.Upload
Vulnhub DOUBLE: 1 Walkthough2021-03-07 21:10:07
https://www.vulnhub.com/entry/double-1,632/Scan ports opened.Port 8080 need auth, we don't know yet. So we start from port 80.Check http://url/production. Try to send some cmd, like cmd="id", code="1", then we can see the comm
Vulnhub Alfa: 1 Simple Walkthrough2021-03-07 14:54:07
https://www.vulnhub.com/entry/alfa-1,655/Simple walkthroug:nmap -sV -sC -p- 192.168.56.72 -oN ports.logftp log in as anonymous, get a pic file.check robots.txt, find brain fuck strings, decode it, and get a new url.enum4linux, get username.ente
Vulnhub bassamCTF: 1 Walkthough2021-03-06 16:42:04
Machine is here.Nmap scan ports.Port 80 only has one file.Get domain name from index.html.Add it to /etc/hosts, then brute force vhost.gobuster vhost -u http://bassam.ctf -w /usr/share/seclists/Discovery/DNS/subdomains-
Vulnhub靶机Hackme:2的Walkthrough(数据库注入、命令注入)2020-12-28 20:49:15
靶机下载地址https://www.vulnhub.com/entry/hackme-2,618/。有一段没玩注入漏洞的靶机了，所以记录一下Walkthrough。 靶机运行后nmap扫描端口，发现只开了22和80。 浏览器打开80端口后，来到一个登录界面，测试了几个弱口令未果。
- 搜索
- 最新留言
-
- 大哥牛，前面轻轻松松后面死活拿不到rootshell。这反编译看懵逼了
- 老哥，我想看samrasa的
- 老哥你好,在你写的书.net加密与解密中看到有#-流相关的, 让读者需要详细了解可查, 但是最近一直查不到详细文档, 只在github的dnlib等代码能看到些逻辑, 但是不系统. 想来书中既然说需要详细了解可自己查,应该是有些方法的, 能否请简单说几个搜索关键词,谢谢 (我查过 uncompress stream , enc 等,结果都很简单)
- 好滴 多谢
- 你在hackmyvm里找个栏目嚷一嗓子，或者搜索Darkmatter已经拿到root的随便谁都可以问。这个vm中间有一个地方没法过，基本上都是作者告知密码才过的。
- 你的discord的username和tag是多少呀？多谢
- 过程太曲折，不准备写了，可在discord联系
- 老哥，有空hackmyvm的darkmatter写个writeup呗。多谢。
- 当前用户必须是kori,然后用sodu cp把apk文件从irida/里面复制出来，再下载。这个机器我已经删除了，所以很多细节想不起来。你可以在discord频道里问问其他人。
- 提示权限不够 用python3 -m http.server，然后wget也是提示权限不够
- 文章归档
Powered By Z-BlogPHP 1.7.2