文章描述了一次渗透测试过程，首先通过扫描IP段和端口发现SSH和HTTP服务，然后访问网站获取提示，找到SSH私钥并连接。成功连接后，使用bash进行提权，最终目标是找到位于/root/下的flag。整个过程强调了对提示信息的理解和利用SSH密钥的重要性。
信息收集
扫IP段，扫端口
发现开启了ssh和http，没有别的信息就先访问网站
网站渗透
Heya! Welcome to the hunt.
In order to enter the give away, you must obtain the root flag located in /root/. Once you’ve obtained the flag, message the TryHarder bot with the command !flag . It will then validate the flag for verification. Should it be incorrect, it will let you know. If it’s correct, you will be given a new role on the server where you can chat with others in a private channel. Once you’ve received the role you are entered into the give away!
You must be a member of the server in order to use the command above.
For those downloading this box off vulnhub at a later time, the command above will no longer be
最低0.47元/天 解锁文章
扫一扫
1414
到【灌水乐园】发言
