文章目录
- Editorial-HackTheBox
-
- 信息搜集
- 漏洞利用
- 权限提升
- 参考文章
Editorial-HackTheBox
信息搜集
nmap扫描端口
nmap -sV -sC -v 10.10.11.20
扫描结果如下
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.7 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 256 0d:ed:b2:9c:e2:53:fb:d4:c8:c1:19:6e:75:80:d8:64 (ECDSA)
|_ 256 0f:b9:a7:51:0e:00:d5:7b:5b:7c:5f:bf:2b:ed:53:a0 (ED25519)
80/tcp open http nginx 1.18.0 (Ubuntu)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-server-header: nginx/1.18.0 (Ubuntu)
|_http-title: Did not follow redirect to http://editorial.htb
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
发现重定向http://editorial.htb，添加域名到/etc/hosts
访问80端口，类似于阅读书籍的网站
ffuf扫描不存在子域名&#
