<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[qq_74243714的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/qq_74243714</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; qq_74243714]]></copyright><item><title><![CDATA[DC1靶机渗透]]></title><link>https://blog.youkuaiyun.com/qq_74243714/article/details/140708892</link><guid>https://blog.youkuaiyun.com/qq_74243714/article/details/140708892</guid><author>qq_74243714</author><pubDate>Fri, 26 Jul 2024 14:57:02 +0800</pubDate><description><![CDATA[环境准备：渗透机：kali2023-------IP:192.168.219.169靶机：DC-1渗透目标:夺取目标机器控制权，拿到5个flag。]]></description><category></category></item><item><title><![CDATA[Dark_hole2靶机实战——详细版]]></title><link>https://blog.youkuaiyun.com/qq_74243714/article/details/140132023</link><guid>https://blog.youkuaiyun.com/qq_74243714/article/details/140132023</guid><author>qq_74243714</author><pubDate>Tue, 02 Jul 2024 18:10:23 +0800</pubDate><description><![CDATA[Sorry, user jehad may not run sudo on darkhole.（不可 sudo提权）--------------计划任务提权-------------sudo -l （发现不能够使用sudo，因为没有losy密码）发现修改历史中有账号和密码，以及dashboard.php页面。方法二：josy用户退回到根目录查看所有文件（包括隐藏文件）SSH登录losy用户（sudo提权）发现账号管理页面，可以修改账号信息。方法一：想到爆破密码（一般不建议）获取到SSH用户密码！]]></description><category></category></item></channel></rss>