Money Heist: 1 vulnhub walkthrough

最新推荐文章于 2024-04-09 01:44:22 发布

原创

最新推荐文章于 2024-04-09 01:44:22 发布 · 803 阅读

0 ·

CC 4.0 BY-SA版权

本文是针对Money Heist 1虚拟机的渗透测试过程详解。首先通过服务探测和Web渗透测试，发现80端口注册后需越权操作。利用JWT token进行base64解码，并使用hashcat破解secret-key。解密后修改cookie获取管理员权限，从而得到admin flag。接着通过SSH登录berlin用户，分析流量包找到professor用户密码，切换用户后获取root权限和最终flag。

Money Heist: 1

虚拟机页面：http://www.vulnhub.com/entry/money-heist-1,592/

Description

“The Professor” has a plan to pull off the biggest heist in recorded history – to print billions of Flags . To help him carry out the ambitious plan, he recruits eight people with certain abilities and who have nothing to lose.

服务探测

PORT     STATE SERVICE VERSION
22/tcp   open  ssh     OpenSSH 7.2p2 Ubuntu 4ubuntu2.10 (Ubuntu Linux; protocol 2.0)
53/tcp   open  domain  ISC BIND 9.10.3-P4 (Ubuntu Linux)
80/tcp   open  http
3000/tcp open  http    Node.js Express framework
3001/tcp open  nessus?