vulnhub:Cute-v1.0.2靶机

最新推荐文章于 2024-04-09 13:33:49 发布

原创

最新推荐文章于 2024-04-09 13:33:49 发布 · 216 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#网络安全

文章详细列出了对192.168.111.147靶机的端口扫描结果，包括开放的服务如SSH、HTTP、POP3以及相关软件版本。发现了Apache、nginx服务器和Courierpop3d服务，并进行了SSL证书检查。接着提到了CMS版本识别、漏洞搜索、路径清除、权限提升过程，最终利用hping3进行提权操作。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

kali:192.168.111.111

靶机:192.168.111.147

端口扫描

PORT    STATE SERVICE  VERSION
22/tcp  open  ssh      OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0)
| ssh-hostkey: 
|   2048 04d06ec4ba4a315a6fb3eeb81bed5ab7 (RSA)
|   256 24b3df010bcac2ab2ee949b058086afa (ECDSA)
|_  256 6ac4356a7a1e7e51855b815c7c744984 (ED25519)
80/tcp  open  http     Apache httpd 2.4.38 ((Debian))
|_http-title: Apache2 Debian Default Page: It works
| http-methods: 
|_  Supported Methods: POST OPTIONS HEAD GET
|_http-favicon: Unknown favicon MD5: 759585A56089DB516D1FBBBE5A8EEA57
|_http-server-header: Apache/2.4.38 (Debian)
88/tcp  open  http     nginx 1.14.2
|_http-title: 404 Not Found
|_http-server-header: nginx/1.14.2
110/tcp open  pop3     Courier pop3d
|_pop3-capabilities: UTF8(USER) STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING USER TOP LOGIN-DELAY(10)
| ssl-cert: Subject: commonName=localhost/organizationName=Courier Mail Server/stateOrProvinceName=NY/countryName=US
| Subject Alternative Name: email:[email protected]
| Issuer: commonName=localhost/organizationName=Courier Mail Server/stateOrProvinceName=NY/countryName=US
| Public Key type: rsa
| Public Key bits: 3072
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2020-09-17T16:28:06
| Not valid after:  2021-09-17T16:28:06
| MD5:   5ee240c866d1