个人博客

UltraTech文章目录UltraTechTask1 Deploy the machineTask2 It's enumeration time!Task3 Let the fun beginTask4 The root of all evilTask1 Deploy the machineDeploy the machineTask2 It’s enumeration time!1.Which software is using the port 8081?Node.js2.Whi

Boiler CTFTask1 Questions #11.File extension after anon logintxt通过ftp访问21端口,使用anonymous账号无密码访问,发现.info.txt文本文件,Whfg jnagrq gb frr vs lbh svaq vg. Yby. Erzrzore: Rahzrengvba vf gur xrl!解密文本文件内容得到提示枚举是关键;2.What is on the highest port?ssh3.What’s

Chocolate Factory文章目录Chocolate FactoryTask1 IntroductionTask2 ChallengesTask1 IntroductionDeploy the machine!Task2 Challengesnmap扫描开启很多端口,Host is up (0.40s latency).Not shown: 65435 closed ports, 71 filtered portsPORT STATE SERVICE VERSION

Blaster文章目录BlasterTask1 Mission Start!Task2 Activate Forward Scanners and Launch Proton TorpedoesTask3 Breaching the Control RoomTask4 Adoption into the CollectiveTask1 Mission Start!Deploy the machine! This is a Windows box so give it a few minutes

Basic Pentesting文章目录Basic PentestingTask1 Web App Testing and Privilege EscalationTask1 Web App Testing and Privilege Escalation1.Deploy the machine and connect to our network2.Find the services exposed by the machine3.What is the name of the hidden

SQL Injection Lab文章目录SQL Injection LabTask1 IntroductionTask2 Introduction to SQL Injection: Part 1Task3 Introduction to SQL Injection: Part 2Task4 Vulnerable Startup: Broken AuthenticationTask5 Vulnerable Startup: Broken Authentication 2Task6 Vulnerab

Startup文章目录Startuptask1 Welcome to Spice Hut!task1 Welcome to Spice Hut!nmap扫描发现靶机开启21-FTP、22-SSH、80-Web三个端口gobuster扫描80端口发现隐藏files目录，可以看到有ftp文件夹，考虑通过FTP上传反弹shell命令行连接21端口，anonymous用户空密码匿名访问成功，用户在ftp目录下具有完全权限，在ftp目录下上传反弹shell文件。nc监听端口，浏览器点击反弹shel

RootMe文章目录RootMeTask1 Deploy the machineTask2 ReconnaissanceTask3 Getting a shellTask4 Privilege escalationTask1 Deploy the machineDeploy the machineTask2 Reconnaissance1.Scan the machine, how many ports are open?22.What version of Apache is runnin

hackerNote文章目录hackerNoteTask1 ReconnaissanceTask2 InvestigateTask3 ExploitTask4 Attack PasswordsTask5 EscalateTask6 Comments on realism and Further ReadingTask1 Reconnaissance1.Which ports are open? (in numerical order)22,80,80802.What programming la

Vulnversity ⭐️反弹shell ⭐️systemctl提权文章目录Vulnversity :star:反弹shell :star:systemctl提权task1 Deploy the machinetask2 Reconnaissancetask3 Locating directories using GoBustertask4 Compromise the webservertask5 Privilege Escalationtask1 Deploy the machine无需回答

ice文章目录iceTask1 ConnectTask2 ReconTask3 Gain AccessTask4 EscalateTask5 LootingTask6 Post-ExploitationTask7 Extra CreditTask7 Extra CreditTask1 Connect1.Connect to our network using OpenVPN. Here is a mini walkthrough of connecting:Go to your access pag

Simple CTF文章目录Simple CTFTask1Task11.How many services are running under port 1000?2.What is running on the higher port?ssh3.What’s the CVE you’re using against the application?CVE-2019-9053NVD - CVE-2019-9053 (nist.gov)4.To what kind of vulne

Kenobi ⭐️SMB文章目录Kenobi :star:SMBtask1 Deploy the vulnerable machinetask2 Enumerating Samba for sharestask3 Gain initial access with ProFtpd :star:ProFtpdtask4 Privilege Escalation with Path Variable Manipulation :star:环境变量提权task1 Deploy the vulnerable

Bounty Hacker文章目录Bounty HackerTask1 Living up to the title.Task1 Living up to the title.1.Deploy the machine2.Find open ports on the machine3.Who wrote the task list?lin1.) Protect Vicious.2.) Plan for Red Eye pickup on the moon.-lin4.What se

Retro文章目录RetroTask1 PwnTask1 Pwnnmap扫描发现靶机为windows server 2012或2016，开启了80与3389端口1.A web server is running on the target. What is the hidden directory which the website lives on?使用gobuster进行目录扫描，字典使用/wordlists/gobuster/directory-list-2.4-medium.txt,确定