https://633k.org/tags/ssh%E8%AF%81%E4%B9%A6/ Recent content in SSH证书 on 633k Hugo zh-CN Wed, 02 Oct 2024 00:00:00 +0000 https://633k.org/posts/resource/ Wed, 02 Oct 2024 00:00:00 +0000 https://633k.org/posts/resource/ <h1 id="resourcehtb-hard">Resource（HTB Hard）</h1> <h2 id="基本信息">基本信息</h2> <ul> <li>IP：<code>10.10.11.27</code></li> <li>VPN：<code>10.10.16.7</code></li> <li>域名：<code>itrc.ssg.htb</code></li> </ul> <h2 id="信息收集">信息收集</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>vim /etc/hosts </span></span></code></pre></div><pre tabindex="0"><code>10.10.11.27 itrc.ssg.htb </code></pre><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>nmap -n -vv --open -T4 -p- -oN AllPorts.nmap 10.10.11.27 </span></span></code></pre></div><pre tabindex="0"><code>80/tcp 22/tcp 2222/tcp </code></pre><p><code>http://itrc.ssg.htb</code> 有登录/注册。SQL 注入无果，注册后可上传 zip。<code>?page=ticket&amp;id=10</code> 可能越权；<code>?page=admin</code> 能进，有 ping 窗口但命令执行失败。</p>