【Vulnhub】OSCP(新手入门)

最新推荐文章于 2025-10-30 14:55:01 发布

原创

最新推荐文章于 2025-10-30 14:55:01 发布 · 420 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#网络安全

文章描述了一次渗透测试过程，首先通过扫描IP段和端口发现SSH和HTTP服务，然后访问网站获取提示，找到SSH私钥并连接。成功连接后，使用bash进行提权，最终目标是找到位于/root/下的flag。整个过程强调了对提示信息的理解和利用SSH密钥的重要性。

下载地址INFOSEC PREP: OSCP

信息收集

扫IP段，扫端口
在这里插入图片描述
发现开启了ssh和http，没有别的信息就先访问网站

网站渗透

Heya! Welcome to the hunt.
In order to enter the give away, you must obtain the root flag located in /root/. Once you’ve obtained the flag, message the TryHarder bot with the command !flag . It will then validate the flag for verification. Should it be incorrect, it will let you know. If it’s correct, you will be given a new role on the server where you can chat with others in a private channel. Once you’ve received the role you are entered into the give away!
You must be a member of the server in order to use the command above.
For those downloading this box off vulnhub at a later time, the command above will no longer be