hackthebox-remote （mount挂载/umbraco 渗透/teamviewer 提权/usosvc 提权）

1、扫描

masscan全局快速扫，nmap具体扫。80想到web信息搜集，2049开了挂载，5985可以远程登录

C:\root> masscan -p1-65535,U:1-65535 10.10.10.180 --rate=1000 -e tun0

Starting masscan 1.0.5 (http://bit.ly/14GZzcT) at 2021-01-06 10:14:40 GMT
 -- forced options: -sS -Pn -n --randomize-hosts -v --send-eth
Initiating SYN Stealth Scan
Scanning 1 hosts [131070 ports/host]
Discovered open port 49665/tcp on 10.10.10.180                                 
Discovered open port 135/tcp on 10.10.10.180                                   
Discovered open port 5985/tcp on 10.10.10.180                                  
Discovered open port 139/tcp on 10.10.10.180                                   
Discovered open port 49664/tcp on 10.10.10.180                                 
Discovered open port 49679/tcp on 10.10.10.180                                 
Discovered open port 47001/tcp on 10.10.10.180                                 
Discovered open port 49678/tcp on 10.10.10.180                                 
Discovered open port 80/tcp on 10.10.10.180                                    
Discovered open port 445/tcp on 10.10.10.180