https://633k.org/tags/chrome-debug/ Recent content in Chrome Debug on 633k Hugo zh-CN Sun, 13 Oct 2024 00:00:00 +0000 https://633k.org/posts/sightless/ Sun, 13 Oct 2024 00:00:00 +0000 https://633k.org/posts/sightless/ <h1 id="sightlesshtb-easy">Sightless（HTB Easy）</h1> <h2 id="基本信息">基本信息</h2> <ul> <li>IP：<code>10.10.11.32</code></li> <li>VPN：<code>10.10.16.4</code></li> <li>域名：<code>sightless.htb</code></li> </ul> <h2 id="信息收集">信息收集</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>vim /etc/hosts </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>rustscan -a 10.10.11.32 -- -sCTV </span></span></code></pre></div><pre tabindex="0"><code>21/tcp open ftp syn-ack | fingerprint-strings: | GenericLines: | 220 ProFTPD Server (sightless.htb FTP Server) [::ffff:10.10.11.32] | Invalid command: try being more creative 22/tcp open ssh syn-ack OpenSSH 8.9p1 Ubuntu 3ubuntu0.10 (Ubuntu Linux; protocol 2.0) 80/tcp open http syn-ack nginx 1.18.0 (Ubuntu) |_http-title: Sightless.htb </code></pre><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>nmap -sC -sV -Pn -T4 -p- -oN AllPorts.nmap 10.10.11.32 </span></span></code></pre></div><p>子域名挖掘发现 <code>http://sqlpad.sightless.htb</code>，未授权，版本 6.10.0。</p>