Vulnhub靶机系列:Node 1.0

这次的靶机是vulnhub靶机：Node 1.0,还是在合天网安上测试

靶机地址及相关描述

https://www.vulnhub.com/entry/node-1,252/
Node is a medium level boot2root challenge, originally created for HackTheBox. There are two flags to find (user and root flags) and multiple different technologies to play with. The OVA has been tested on both VMware and Virtual Box.

靶机设置

kali和靶机ip

利用知识及工具

nmap、js代码审计、fcrackzip破解zip密码

信息收集并getshell

看下web页面

貌似没啥，扫下目录

端口貌似没有什么