FunboxEasyEnum

https://download.vulnhub.com/funbox/Funbox7.ova

靶场IP：192.168.2.8

扫描对外端口服务

┌──(root㉿kali)-[~/Desktop]
└─# nmap -p1-65535 -sV 192.168.2.8
Starting Nmap 7.92 ( https://nmap.org ) at 2022-09-05 07:31 EDT
Nmap scan report for 192.168.2.8
Host is up (0.00049s latency).
Not shown: 65533 closed tcp ports (reset)
PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
80/tcp open  http    Apache httpd 2.4.29 ((Ubuntu))
MAC Address: 08:00:27:8F:87:22 (Oracle VirtualBox virtual NIC)
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 9.02 seconds

浏览器访问80端口

image-20220905193226169

爆破web目录

image-20220905193433328
image-20220905194403536

上传php反弹shell

image-20220905194532044

建立反弹shell成功。

image-20220905194845136

对用户进行暴力破解

查看sudo列表

提权

上一页FunboxEasy下一页FunboxRookie

最后更新于

这有帮助吗？