HACKME 1

https://download.vulnhub.com/hackme/hackme.ova

靶场IP：192.168.32.209

扫描对外端口服务

┌──(root💀kali)-[~/Desktop]
└─# nmap -p 1-65535 -sV  192.168.32.209                                                                                                                                                                                                
Starting Nmap 7.92 ( https://nmap.org ) at 2022-09-07 02:43 EDT
Nmap scan report for 192.168.32.209
Host is up (0.00090s latency).
Not shown: 65533 closed tcp ports (reset)
PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 7.7p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
80/tcp open  http    Apache httpd 2.4.34 ((Ubuntu))
MAC Address: 00:0C:29:E1:C2:D8 (VMware)
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.35 seconds

访问80端口

image-20220907144655823

注册一个测试账号进行登录

image-20220907145457243

输入框存在SQL注入漏洞

使用sqlmap进行注入，找到superadmin/Uncrackable

image-20220907145959012

使用superadmin用户登录，发现有上传页面。

image-20220907150038388

尝试上传webshell

image-20220907150211270

访问/uploads目录就可以看到已经上传成功。

image-20220907150240018

查找suid文件

直接提权成功。

image-20230208145931450
上一页HackLAB：vulnix下一页HACKME 2

最后更新于

这有帮助吗？