search

Raven 2

https://download.vulnhub.com/raven/Raven2.ova

靶场IP：192.168.32.208

扫描对外端口服务

┌──(root💀kali)-[/tmp]
└─# nmap -p 1-65535 -sV  192.168.32.208                                                                                                                                                                                                
Starting Nmap 7.92 ( https://nmap.org ) at 2022-09-06 22:55 EDT
Nmap scan report for 192.168.32.208
Host is up (0.00085s latency).
Not shown: 65531 closed tcp ports (reset)
PORT      STATE SERVICE VERSION
22/tcp    open  ssh     OpenSSH 6.7p1 Debian 5+deb8u4 (protocol 2.0)
80/tcp    open  http    Apache httpd 2.4.10 ((Debian))
111/tcp   open  rpcbind 2-4 (RPC #100000)
53818/tcp open  status  1 (RPC #100024)
MAC Address: 00:0C:29:F2:53:5B (VMware)
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 14.59 seconds

访问80端口

image-20220907105626590

爆破目录

点击目录，发现这个文件夹存在目录遍历问题和这个源码是phpmailer

image-20220907105843690

cms版本

image-20220907110026028

找到一个flag

image-20220907105948391

搜索漏洞

使用php/webapps/40974.py

修改攻击机和靶场IP

image-20220907110728063
上一页Raven 1下一页Readme 1

最后更新于