Linux下内网渗透常见命令

操作系统版本

cat /etc/issue

cat /etc/*-release

cat /etc/lsb-release

cat /etc/redhat/release

getconf LONG_BIT  查看系统位数

操作系统的内核版本

cat /proc/version

uname -a

uname -mrs

rpm -q kernel

dmesg |grep Linux

ls /boot |grep vmlinuz

用户相关

id
who
w
last
cat /etc/passwd
cat /etc/group
cat /etc/shadow
ls -alh /var/mail/
grep -v -E "^#" /etc/passwd | awk -F: '$3 == 0 { print $1}'   # 列出超级用户
awk -F: '($3 == "0") {print}' /etc/passwd   #列出超级用户
cat /etc/sudoers
sudo -l

列主目录

ls -ahlR /root/
ls -ahlR /home/
其他用户的操作记录
cat ~/.bash_history
cat ~/.nano_history
cat ~/.atftp_history
cat ~/.mysql_history
cat ~/.php_history

SSH私钥

cat ~/.ssh/authorized_keys
cat ~/.ssh/identity.pub
cat ~/.ssh/identity
cat ~/.ssh/id_rsa.pub
ca