当前位置：网站首页>HTB-Blocky

HTB-Blocky

2022-07-29 02:56:00 【It's always late at night.】

HTB-Blocky

information gathering

nmap
Insert picture description here

  • FTP Anonymous login is not allowed
  • SSH
  • HTTP

Insert picture description here

gobuster
Insert picture description here
One wp The login interface of
Insert picture description here
One phpmyadmin Login interface
Insert picture description here
There are also two plug-ins
Insert picture description here
And one. include
Insert picture description here

Turn it on

First go to see two plug-ins , stay jd-gui I opened it and found BlockyCore.jar Hidden things .

Insert picture description here
Test found that you can log in phpmyadmin
Insert picture description here
And can be in wordpress Curry found it wp_users Login information of table

Insert picture description here
Discovery cannot be used for wordpress Sign in
Insert picture description here

Don't worry. , One more ssh.
Insert picture description here
Not yet. , Will there be password reuse ？ Try again. jar The code inside .

Insert picture description here

Then try sudo -l and sudo -i
Insert picture description here

原网站

版权声明
本文为[It's always late at night.]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/210/202207290221176269.html

边栏推荐

猜你喜欢

随机推荐