HackTheBox——openadmin wp

openamin今天在HTB下线了，所以趁着下线且还能访问的空档赶紧写个WP，记录、回顾、找不足

1.信息收集：

root@kali:~/HTB/Openadmin# nmap -F 10.10.10.171
Starting Nmap 7.80 ( https://nmap.org ) at 2020-05-04 16:26 CST
Nmap scan report for 10.10.10.171
Host is up (0.43s latency).
Not shown: 98 closed ports
PORT   STATE SERVICE
22/tcp open  ssh
80/tcp open  http

Nmap done: 1 IP address (1 host up) scanned in 17.43 seconds

第一反应就是打开网页看一眼
同时习惯性的查看一下源代码

根据页面来看并没有什么有营养的东西，并且源代码里也并不存在提示
但是既然开了端口应该就不止这一个页面，我们使用工具FUZZ目录

root@kali:~# gobuster dir -u http://10.10.10.171/ -w /usr/share/wordlists/dirb/common.txt -t 100
===============================================================
Gobuster v3.0.1
by OJ Reeves (@TheColonial) & Christian Mehlmauer (@_FireFart_)
===============================================================
[+]