[渗透测试学习] PermX-HackTheBox

---

PermX-HackTheBox

信息搜集

nmap扫描一下端口

nmap -sC -v 10.10.11.23

扫描结果如下

PORT   STATE SERVICE
22/tcp open  ssh
| ssh-hostkey: 
|   256 e2:5c:5d:8c:47:3e:d8:72:f7:b4:80:03:49:86:6d:ef (ECDSA)
|_  256 1f:41:02:8e:6b:17:18:9c:a0:ac:54:23:e9:71:30:17 (ED25519)
80/tcp open  http
| http-methods: 
|_  Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to http://permx.htb

发现80端口重定向http://permx.htb，添加域名到/etc/hosts

访问80端口，打开页面翻译发现是个学习平台

扫一下有没有子域名