https://633k.org/tags/ssti/ Recent content in SSTI on 633k Hugo zh-CN Tue, 08 Oct 2024 00:00:00 +0000 https://633k.org/posts/trickster/ Tue, 08 Oct 2024 00:00:00 +0000 https://633k.org/posts/trickster/ <h1 id="tricksterhtb-medium">Trickster（HTB Medium）</h1> <h2 id="基本信息">基本信息</h2> <ul> <li>IP：<code>10.10.11.34</code></li> <li>VPN：<code>10.10.16.15</code></li> <li>域名：<code>trickster.htb</code> / <code>shop.trickster.htb</code></li> </ul> <h2 id="信息收集">信息收集</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>nmap -n -vv -sC -sV -Pn -T4 10.10.11.34 </span></span></code></pre></div><pre tabindex="0"><code>22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.10 80/tcp open http Apache httpd 2.4.52 </code></pre><p>目录扫描发现 <code>.git/HEAD</code>：</p>