walkthrough

2024-11-12Shiftdel walkthrough Intermediate
点击查看代码nmap-p--A192.168.167.174StartingNmap7.94SVN(https://nmap.org)at2024-11-1200:09UTCNmapscanreportfor192.168.167.174Hostisup(0.071slatency).Notshown:65532closedtcpports(reset)PORTSTATESERVICEVERSION22/tcpop
2024-11-12Cockpit pg walkthrough Intermediate
nmap发现两个web站80和9090还有22端口dirsearch发现80端口有login.php登录界面发现没有弱口令测试sql注入测试了一会发现密码password='#就绕过了不过我没搞懂为啥就绕过了要后面拿了root权限才知道登录之后发现密码james Y2FudHRvdWNoaGh0aGlzc0A0NTUxNTI=
2024-11-11Educated PG walkthrough Intermediate
nmap扫到8022dirsearch扫描发现┌──(root㉿kali)-[~]└─#dirsearch-uhttp://192.168.167.13//usr/lib/python3/dist-packages/dirsearch/dirsearch.py:23:DeprecationWarning:pkg_resourcesisdeprecatedasanAPI.Seehttps://setuptools.pypa.io/en/latest
2024-11-10law Intermediate walkthrough pg
靶场很简单分数只有10分跟平常做的20分的中级靶场比确实简单我拿来放松的算下来30分钟解决战斗nmap扫到80端口web界面是个框架搜exphttps://www.exploit-db.com/exploits/52023他的脚本可能有点问题看不到回显我们审脚本直接看到漏洞点所在命令执行curl-s-d"sid=foo
2024-11-09Groove Intermediate pg walkthrough
80端口web站点dirsearch没发现啥有用信息感觉就是让我们突破登录框进后台的https://github.com/ChurchCRM/CRM/issues/137上网查到默认密码登录后台跟具cms查exp发现有个SQL注入payload找半天找到一个可以直接sql注入http://192.168.167.44/EventAttendance.php?Actio
2024-09-12A Walkthrough Using Acquire and Release Fences
We’lltaketheexamplefrommypreviouspostandmodifyittouseC++11’sstandaloneacquireandreleasefences.Here’stheSendTestMessagefunction.Theatomicwriteisnowrelaxed,andareleasefencehasbeenplacedimmediatelybeforeit.voidSen
2024-05-21Fallout Walkthrough
TheNearlyUltimateFalloutGuideVersion1.1WrittenandcodedbyPerJornerThemainthingyouwillfindinFO1isthereislessofeverything.Ofcourse,itshouldcomeasnosurprisethatthefirstgameintheserieswouldbesmallerthanthesequel.
2024-05-11SolidState 靶机 walkthrough
扫描┌──(root㉿kali)-[/home/kali]└─#nmap-T5-A-v-p-192.168.80.141StartingNmap7.92(https://nmap.org)at2022-10-2403:50EDTNSE:Loaded155scriptsforscanning.NSE:ScriptPre-scanning.InitiatingNSEat03:50CompletedNSEat03:50,0.00
2023-12-08Fiori WalkThrough学习-Step02.Bootstrap
1.Index.html<!DOCTYPEhtml><html><head><metacharset="utf-8"><title>UI5Walkthrough</title><scriptid="sap-ui-bootstrap"src="https://openui5.hana.ondemand.co
2023-11-28hackthebox format medium walkthrough
walkthough 1.Wemustbrowsethewebsiteandlookupthebusinesspointforthewebpage.atthisboxwecanfindthecoderepository.codeauditinganddiscoveringtheprivilegeescalatedthroughtheRedisUnixsockvulnerability.2.Afterprivilegeescalat
2023-06-13Walkthrough-digitalworld.local: BRAVERY
0x01环境靶机地址：https://www.vulnhub.com/entry/digitalworldlocal-bravery,281/0x02过程1.信息收集┌──(root㉿kali)-[/home/kali/Desktop/oscp]└─#netdiscover-r192.168.60.0/24Currentlyscanning:Finished!|ScreenView:UniqueHosts
2023-06-05Walkthrough-hackme 1
0x01环境靶机地址：https://www.vulnhub.com/entry/hackme-1,330/0x02过程1.信息收集┌──(root㉿kali)-[/home/kali]└─#netdiscover-r192.168.60.0/24Currentlyscanning:Finished!|ScreenView:UniqueHosts
2023-06-02Walkthrough-SolidState 1
0x01环境靶机地址：https://www.vulnhub.com/entry/solidstate-1,261/0x02过程1.信息收集┌──(root㉿kali)-[/home/kali/Desktop/oscp]└─#netdiscover-r192.168.60.0/24Currentlyscanning:Finished!|ScreenView:UniqueHosts
2023-05-31Walkthrough-TR0LL 1
0x01环境靶机地址：https://www.vulnhub.com/entry/tr0ll-1,100/该靶机偏CTF0x02过程1.信息收集┌──(root㉿kali)-[/home/kali/Desktop/oscp]└─#netdiscover-r192.168.60.0/24Currentlyscanning:Finished!|ScreenView:UniqueHosts
2023-05-30Walkthrough-WINTERMUTE 1
0x01环境靶机地址：https://www.vulnhub.com/entry/wintermute-1,239/两个靶机，做网络隔离STRAYLIGHT一张网卡桥接，另一张仅主机模式，桥接网卡时，可能有点问题，重选一下网卡就好了Kali做桥接网卡NEUROMANCER仅主机kali和NEUROMANCER网络不联通0x02过程STRAYLIGHT1.信息收
2023-04-16Vulnhub Fall Walkthrough
Recon二层本地扫描，发现目标靶机。┌──(kali㉿kali)-[~]└─$sudonetdiscover-r192.168.80.0/24Currentlyscanning:Finished!|ScreenView:UniqueHosts4CapturedARPReq/Rep
2023-04-13Vulnhub Joy Walkthrough
Recon这台靶机对枚举的要求较高，如果枚举不出有用的信息可能无法进一步展开，我们首先进行普通的扫描。┌──(kali㉿kali)-[~/Labs/Joy/80]└─$sudonmap-sS-sV-p-192.168.80.136StartingNmap7.93(https://nmap.org)at2023-04-1022:42EDTNmapscanreportfor
2023-04-12Vulnhub Development Walkthrough
VulnhubDevelopmentWalkthroughRecon首先使用netdiscover进行二层Arp扫描。┌──(kali㉿kali)-[~]└─$sudonetdiscover-r192.168.80.0/24Currentlyscanning:Finished!|ScreenView:UniqueHosts5CapturedARPReq/Reppackets,from5hosts.Total
2023-04-11Walkthrough-SICKOS 1.2
0x01环境靶机地址：https://www.vulnhub.com/entry/sickos-12,144/靶机用VMware打开；virtualbox有点麻烦，参考靶机地址进行配置。0x02过程1.信息收集┌──(root㉿kali)-[/home/kali/Desktop/tmp]└─#netdiscover-r192.168.60.1/24Currentlyscanning:Finished!|
2023-04-08Vulnhub Bravery靶机 Walkthrough
BraveryRecon使用netdiscover对本地网络进行arp扫描。┌──(kali㉿kali)-[~]└─$sudonetdiscover-r192.168.80.0/24Currentlyscanning:Finished!|ScreenView:UniqueHosts5
2023-03-28Walkthrough-KIOPTRIX 2014
0x01环境靶机地址：https://www.vulnhub.com/entry/kioptrix-2014-5,62/靶机默认网卡有点问题，移除网卡再新增网卡即可环境容易崩溃，崩溃了重启就好0x02过程1.信息收集
2023-03-24Walkthrough-KIOPTRIX LEVEL1.3
0x01环境靶机地址：https://www.vulnhub.com/entry/kioptrix-level-13-4,25下载下来后就只有一块硬盘vmdk需要新建一个MS-DOS机器，并把硬盘指定为靶机的vmdk修改内存大
2023-03-23Walkthrough-KIOPTRIX LEVEL1.2
0x01环境靶机地址：https://www.vulnhub.com/entry/kioptrix-level-12-3,24/0x02过程1.信息收集netdiscover-r192.168.60.1/24Currentlyscanning:Finished!
2022-11-08VulnHub-Lampiao-Walkthrough
nmap扫描内网存活主机nmap-sP192.168.32.0/24我的靶机ip是192.168.32.135扫描端口nmap-sS-sV-A-p-192.168.32.135扫出来22、80、1898端口这里对80网站源码
2022-11-07VulnHub-GoldenEye-1-Walkthrough
靶机地址：https://www.vulnhub.com/entry/goldeneye-1,240/下载成功过后使用虚拟机打开需要注意：靶机和kail的网络适配器需要一致，不然会扫描不出来，这里我使用的的nat模式