Vulnhub靶场DC-6练习

目录

• 0x00 准备
• 0x01 主机信息收集
• 0x02 站点信息收集
• • 1. wordpress扫描
  • 2. wordlists字典爆破
• 0x03 漏洞查找与利用
• • 1. 漏洞查找
  • 2. CVE-2018-15877漏洞利用
  • 3. 反弹shell
  • 5. nmap提权
• 0x04 总结

0x00 准备

下载链接：https://download.vulnhub.com/dc/DC-6.zip

介绍：CLUE
OK, this isn’t really a clue as such, but more of some “we don’t want to spend five years waiting for a certain process to finish” kind of advice for those who just want to get on with the job.
cat /usr/share/wordlists/rockyou.txt | grep k01 > passwords.txt That should save you a few years.