- 博客(10)
- 资源 (2)
- 收藏
- 关注
原创 CTFHub-SSRF-Writeup
SSRF SSRF常见利用方式总结 内网访问 直接构造访问请求,获取flag /?url=127.0.0.1/flag.php 伪协议读取文件 根据题目提示使用file://协议,尝试一般web目录/var/www/html/ 端口扫描 提示端口范围8000到9000 /?url=127.0.0.1:8000 使用burpsuite对端口进行爆破,即可得到端口,访问获取flag POST请求 访问/?url=127.0.0.1/flag.ph,返回页面 包含一个form和隐藏的key,推测需要在fo
2021-12-15 14:18:02
3010
原创 vulnhub靶机-DC9-Writeup
0x01 介绍 靶机地址: https://www.vulnhub.com/entry/dc-9,412/ DESCRIPTION DC-9 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing. The ultimate goal of this challenge is to get root and to read the
2021-12-09 23:40:49
2431
原创 vulnhub靶机-DC8-Writeup
0x01 介绍 靶机地址: https://www.vulnhub.com/entry/dc-8,367/ DESCRIPTION DC-8 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing. This challenge is a bit of a hybrid between being an actual challe
2021-12-09 23:30:55
2111
原创 vulnhub靶机-DC7-Writeup
0x01 介绍 靶机地址: https://www.vulnhub.com/entry/dc-7,356/ DESCRIPTION DC-7 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing. While this isn’t an overly technical challenge, it isn’t exactly e
2021-12-09 23:26:00
1659
原创 vulnhub靶机-DC6-Writeup
0x01 介绍 靶机地址: https://www.vulnhub.com/entry/dc-6,315/ DESCRIPTION DC-6 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing. This isn’t an overly difficult challenge so should be great for be
2021-12-08 18:04:15
427
原创 vulnhub靶机-DC5-Writeup
0x01 部署 靶机地址: https://www.vulnhub.com/entry/dc-5,314/ DESCRIPTION DC-5 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing. The plan was for DC-5 to kick it up a notch, so this might not be
2021-12-08 18:00:50
269
原创 vulnhub靶机-DC4-Writeup
0x01 部署 靶机地址: https://www.vulnhub.com/entry/dc-4,313/ DESCRIPTION DC-4 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing. Unlike the previous DC releases, this one is designed primarily fo
2021-12-08 17:57:05
343
原创 vulnhub靶机-DC3-Writeup
0x01 部署 靶机地址: https://www.vulnhub.com/entry/dc-3,312/ DESCRIPTION DC-3 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing. As with the previous DC releases, this one is designed with beginn
2021-12-08 17:52:57
395
原创 vulnhub靶机-DC2-Writeup
0x01 部署 靶机地址: https://www.vulnhub.com/entry/dc-2,311/ DESCRIPTION Much like DC-1, DC-2 is another purposely built vulnerable lab for the purpose of gaining experience in the world of penetration testing. As with the original DC-1, it’s designed with begi
2021-12-08 17:15:17
740
空空如也
TA创建的收藏夹 TA关注的收藏夹
TA关注的人
RSS订阅