当前位置：网站首页>HTB-Shocker

HTB-Shocker

2022-08-01 14:04:00 【How good is always late at night.】

HTB-Shocker

insert image description here

Information Collection

insert image description here

  • ssh
  • http
    insert image description here

insert image description here
insert image description here

There is very little information collected, the directory should be scanned for additional extensions, dirbuster only has the php extension by default.insert image description here

insert image description here
Take a look at user.txt, I found that I don't seem to understand it.

insert image description here
Go search to see what is the relationship between the twoWhat conditions do these two meet?

Insert image description here
I got something and found Shellshock
insert image description here

Power On

insert image description here
insert image description here

Elevation of Privilege

How to create a /bin/bash session through perl, I found the parameter for one-time code execution by searching -e
insert image description here
Also searched for perl commands to execute system commands
insert image description here
insert hereImage description
No accident exec also works
inInsert image description here

原网站

版权声明
本文为[How good is always late at night.]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/213/202208011353340427.html

边栏推荐

猜你喜欢

随机推荐