vulnhub-BBS (CUTE): 1.0.1-cute

http://blog.yutian233.xyz/index.php/archives/63/

靶机描述

Machine name: BBS (Bulletin Board System)Level: Easy->Intermediateflags: user, rootDescription: really technical machine, if you are ready for certifications it will be a good tool to test yourself. You will find a very rare final exploit technique, which you have hardly seen before!Author: foxloxAbout VM: VirtualBox ready, the adapter is currently Bridged, DHCP activeYou can contact me by email (fox at thebrain dot net) or Discord foxlox#1089Machine hint: don't let your eyes confuse you, Try Harder!This works better with VirtualBox rather than with VMware ## Changelog v1.0.1 - 2020-09-23 v1.0.0 - 2020-09-21

下载 https://www.vulnhub.com/entry/bbs-cute-101,567/

清单

信息搜集
- netdiscover
- nmap
- dirb
提权
- CuteNews 2.1.2 - Remote Code Execution(CVE-2019-11447)
- sudo -l (hping3)

信息搜集

靶机IP

端口扫描

nmap -sS -sV -p- 192.168.34.152

PORT    STATE SERVICE  VERSION
22/tcp  open  ssh      OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0)
80/tcp  open  http     Apache httpd 2.4.38 ((Debian))
88/tcp  open  http     nginx 1.14.2
110/tcp open  pop3     Courier pop3d
995/tcp open  ssl/pop3 Courier pop3d

目录扫描

来到 index.php

vulnhub-BBS (CUTE): 1.0.1-cute相关推荐

VulnHub靶场之BBS (cute): 1.0.1
VulnHub靶场之BBS (cute): 1.0.1 扫描IP以及端口: 先不管其他东西,直接访问80,web页面: 目录扫描: 访问index.php: 发现使用的是CuteNews 2.1.2, ...
VulnHub靶机-Jangow: 1.0.1
NO.1 VulnHub靶机-Jangow: 1.0.1 迟到的文章,就当库存发出来吧~ by AnQtroops 2022.9.10 0x00 靶机信息 1.下载地址:https://www.vul ...
VulnHub靶场之CH4INRULZ_v1.0.1
下载地址:http%3A//download.vulnhub.com/ch4inrulz/CH4INRULZ_v1.0.1.ova 主机发现 netdiscover -i eth0 -r 192.16 ...
vulnhub-BBS(cute)1.0.1
前言: 很长时间没有做过靶机了,现在又跑回来做一做.确切的说本人就是菜鸡本菜了,因为困难靶机做不了,中等靶机有难度,简单靶机又嫌弃,想来多少有些可笑,总想去提升,却总感觉在原地踏步.看了一些推荐,我又 ...
vulnhub靶场之 LordOfTheRoot_1.0.1
LordOfTheRoot_1.0.1 namp简单使用 namp 192.168.5.0/24 -sP 探测目标主机存活情况 namp 192.168.5.0/24 -O 识别操作系统 namp 1 ...
Vulnhub靶场渗透-CH4INRULZ_v1.0.1
前言靶机ip(192.168.110.135) 攻击机ip(192.168.110.127) 网络NAT模式直接开始信息收集吃了上次的亏,这次就比较详细的扫了一下端口发现 ftp服务的2.3 ...
vulnhub靶场-Hacker_Kid-v1.0.1
1.靶机信息靶机名称:Hacker_Kid-v1.0.1 靶机难度:中等虚拟机环境:此靶机推荐使用Virtualbox搭建目标:取得root权限靶机地址:https://download.vu ...
Hacker_kid-v1.0.1(vulnhub)
中等难度的靶机,取得权限即可(提示:信息收集,不需要爆破) 此靶机存在的都是新兴的漏洞类型. 地址如下: https://download.vulnhub.com/hackerkid/Hacker_K ...
Vulnhub靶场——Hacker_Kid-v1.0.1
1.概要靶机下载地址:https://download.vulnhub.com/hackerkid/Hacker_Kid-v1.0.1.ova 攻击机地址:192.168.60.148 靶机地址:1 ...

vulnhub-BBS (CUTE): 1.0.1-cute

靶机描述

信息搜集

端口扫描

目录扫描

vulnhub-BBS (CUTE): 1.0.1-cute相关推荐

最新文章

热门文章