Find the services exposed by the machine
What is the name of the hidden directory on the web server
User brute-forcing to find the username & password
What is the username?
有SMB,进行枚举
enum4linux -a 10.10.136.231
What is the password?
Enumerate the machine to find any vectors for privilege escalation
以上命令是为了让linpeas在靶机上运行
What is the final password you obtain?
复制id_rsa到本机并破解密码(名字随便起)