Money Heist: 1
虚拟机页面:http://www.vulnhub.com/entry/money-heist-1,592/
Description
“The Professor” has a plan to pull off the biggest heist in recorded history – to print billions of Flags . To help him carry out the ambitious plan, he recruits eight people with certain abilities and who have nothing to lose.
服务探测
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.10 (Ubuntu Linux; protocol 2.0)
53/tcp open domain ISC BIND 9.10.3-P4 (Ubuntu Linux)
80/tcp open http
3000/tcp open http Node.js Express framework
3001/tcp open nessus?
web渗透测试
访问80端口,注册用户后提示不是管理员用户。很明显是要求越权,于是查看cookie。
jwt t