https://633k.org/tags/output-messenger/ Recent content in Output Messenger on 633k Hugo zh-CN Mon, 07 Oct 2024 00:00:00 +0000 https://633k.org/posts/infiltrator/ Mon, 07 Oct 2024 00:00:00 +0000 https://633k.org/posts/infiltrator/ <h1 id="infiltratorhtb-insane">Infiltrator（HTB Insane）</h1> <h2 id="基本信息">基本信息</h2> <ul> <li>IP：<code>10.10.11.31</code></li> <li>VPN：<code>10.10.16.3</code></li> <li>域名：<code>infiltrator.htb</code> / <code>dc01.infiltrator.htb</code></li> </ul> <h2 id="信息收集">信息收集</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>vim /etc/hosts </span></span><span style="display:flex;"><span>rustscan -a 10.10.11.31 -- -sCTV </span></span><span style="display:flex;"><span>nmap -sC -sV -Pn -T4 10.10.11.31 </span></span></code></pre></div><pre tabindex="0"><code>53/tcp open domain 80/tcp open http Microsoft IIS httpd 10.0 88/tcp open kerberos-sec 135/tcp open msrpc 139/tcp open netbios-ssn 389/tcp open ldap Domain: infiltrator.htb 445/tcp open microsoft-ds? 464/tcp open kpasswd5? 593/tcp open ncacn_http 636/tcp open ssl/ldap 3268/tcp open ldap 3269/tcp open ssl/ldap 3389/tcp open ms-wbt-server 5985/tcp open http 9389/tcp open mc-nmf </code></pre><p>RDP NTLM：<code>DNS_Computer_Name: dc01.infiltrator.htb</code>。HTTP / SMB 匿名没有直接利用点。网页人名：</p>