1.8k 字 2 分钟

# Task 1 Q：What does the acronym SQL stand for? ​ A：Structured Query Language ​ # Task 2 Q：What is one of the most common type of SQL vulnerabilities? ​ A：SQL injection ​ # Task 3 Q：What does PII stand for? ​ A：personally identifiable information ​ # Task 4 Q：What does the OWASP Top 10 list name the...
7k 字 6 分钟

# 资料 smbclient impacket github-winPEAS# Task 1 # Task 1​ Q：Which TCP port is hosting a database server? ​ ┌──(root💀kali)-[~/桌面]└─# nmap -sV -Pn 10.129.233.35Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-06 11:29 CSTNmap scan report for 10.129.233.35Host is up (0.44s latency).Not shown: 996...
3.1k 字 3 分钟

# Task 1 Q：What nmap scanning switch employs the use of default scripts during a scan? ​ A： -sC ​ # Task 2 Q：What service version is found to be running on port 21? ​ ┌──(root💀kali)-[~]└─# nmap -sV -Pn -p21 10.129.1.15 Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-05 15:47 CSTNmap scan report...
1.8k 字 2 分钟

# Task 1 ​ Q：What does the 3-letter acronym FTP stand for? A：File Transfer Protocol ​ # Task 2 Q：What communication model does FTP use, architecturally speaking? A：client-server model ​ # Task 3 Q：What is the name of one popular GUI FTP program? ​ A：FileZilla ​ # Task 4 Q：Which port is the FTP...
2.3k 字 2 分钟

# Task 1 Q:What does the acronym VM stand for? A:virtual machine ​ # Task 2 Q:What tool do we use to interact with the operating system in order to start our VPN connection? ​ A：terminal ​ # Task 3 ​ Q：What service do we use to form our VPN connection? ​ A：openvpn ​ # Task 4 Q：What is the abreviated...
2.4k 字 2 分钟

# Task 1 Q：What does the 3-letter acronym SMB stand for? ​ A：Server Message Block ​ # Task 2 Q：What port does SMB use to operate at? ​ A：445 ​ # Task 3 Q：What network communication model does SMB use, architecturally speaking? ​ A：Client-Server Model ​ # Task 4 Q：What is the service name for port...
4.1k 字 4 分钟

# Task 1 ​ Q：With what kind of tool can intercept web traffic? A：proxy ​ # Task 2 Q：What is the path to the directory on the webserver that returns a login page? ​ F12 检查元素发现有一行 <script src="/cdn-cgi/login/script.js"></script> 这不就找到后台了？ ​ 根据提示也可以使用...
5.7k 字 5 分钟

# 相关资料 ​getshell responser 捕获 win hash evil-winrm # Task 1 Q：How many TCP ports are open on the machine? ​ ┌──(root💀kali)-[~]└─# nmap -sC -Pn -p1-65535 10.129.42.95Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-05 16:12 CSTNmap scan report for 10.129.42.95Host is up (0.39s latency).Not shown:...
4.1k 字 4 分钟

# Task 1 Q：What does the acronym SQL stand for? ​ A：Structured Query Language ​ # Task 2 Q： During our scan, which port running mysql do we find? ​ A：3306 ​ # Task 3 Q： What community-developed MySQL version is the target running? ┌──(root💀kali)-[~]└─# nmap -A -T4 10.129.242.222 Starting Nmap 7.92...
3.2k 字 3 分钟

# Task 1 ​ Q：What ports are open? ​ ┌──(root💀kali)-[~]└─# nmap -sV -Pn 10.129.248.11Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-09 16:50 CSTNmap scan report for 10.129.248.11Host is up (0.50s latency).Not shown: 996 closed tcp ports (reset)PORT STATE SERVICE VERSION22/tcp open ssh OpenSSH...