https://www.vulnhub.com/entry/ha-avengers-arsenal,369/
Avengers are meant to be Earth’s Mightiest Heroes, but some heroes just aren’t mighty enough without their trusty weapon in hand.
The Goal is to gather all the 5 mightiest weapons:
VIBRANIUM SHIELD美队的盾牌
MJØLNIR 雷神之锤
SCEPTRE 洛基权杖
STORMBREAKER 雷神的风暴战斧
YAKA ARROW 勇度的亚卡箭
ENUMERATION IS THE KEY!!!
Visit our website http://hackingarticles.in
80端口
先看一下源代码里面会不会有提示,在亚卡箭一栏里发现有个跳转链接
点击访问,看起来是ASCII hex编码
解码成一个像账号密码一样的字符 agent:avengers
目录扫描:robots.txt
/groot下有个压缩文件hammer.zip,下载下来,解压需要密码
.git目录:
其他大部分文件基本上和这些一样:http://192.168.175.150/.git