天元喜羊羊的博客

上次没有成功获得cmdshell，因为fasttrack没有这方面的代码，这次编写了server.py。原来的博客链接：http://blog.youkuaiyun.com/feier7501/article/details/9220495import socketHOST = ''PORT = 4444s = socket.socket(socket.AF_INET, socket

fasttrack操作：root@bt:~# cd /pentest/exploits/fasttrack/root@bt:/pentest/exploits/fasttrack# ./fast-track.py -i****************************************************** Performing dependency checks...

login.jsp如下：<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>Register user username: password: bt5上操作如下：root@bt:/pentest/exploits/fasttrack

bt5上操作： ***************************************************************** ** ** ** Fast-Track - A new beginning...

在BT5R3上，需要修改文件/pentest/exploits/fasttrack/config/fasttrack_config，改为：METASPLOIT_PATH=/opt/metasploit/app/否则会找不到msfcli。然后进入fasttrack进行操作：root@bt:/pentest/exploits/fasttrack# ./fast-track.py -i

今晚再次调试，发现生成的h2b.exe无法运行，这个文件用来把hex转换成bin，而且后面的代码，似乎也有问题： print "Metasploit payload delivered.." print "Converting our payload to binary, this may take a few..." query5=("""xp_c

这次也是失败的，操作如下：root@bt:/pentest/exploits/fasttrack# ./fast-track.py -iFast-Track Main Menu: 1. Fast-Track Updates 2. Autopwn Automation 3. Nmap Scripting Engine 4. Microsoft SQL

操作如下：root@root:/pentest/exploits/fasttrack# ./fast-track.py -i****************************************************** Performing dependency checks... *******************************************