Challenge 2 - Relia(5)
Challenge 2 - Relia(5) 下一個目標是第五台，選定的機器是對外的 192.168.xxx.249 Rustscan，└─$ rustscan -a 192.168.188.249 --scripts none --ulimit 5000 | tee rustscan snmp 沒有開，└─$ sudo nmap -sU -p 161 192.168.188.249 | tee snmp nmap，└─$ sudo nmap -sCV -A -p 80,135,139,445,3389,5985,8000,47001,49664,49665,49666,49667,49668,49669 192.168.188.249 | tee nmap 80/tcp open http Microsoft IIS httpd 10.0 3389/tcp open ms-wbt-server Microsoft Terminal Services | NetBIOS_Domain_Name: LEGACY --> 這台伺服器名稱是 LEGACY 8000/tcp open http Apache httpd 2.4.54 ((Win64) OpenSSL/1.1.1p PHP/7.4.30) | http-title: Welcome to XAMPP --> 熟悉的 XAMPP enum4linux，└─$ enum4linux -a 192.168.188.249 | tee enum4linux 80 / 80 /robots.txt 80 gobuster 8000 / 8000 /phpmyadmin 8000 /phpinfo.php 發現使用...