Hack The Box —— Lame

信息搜集与漏洞利用

First go to nmap and scan a wave:

1

nmap -T4 -A -v 10.10.10.3

Four ports were found to be opened.

Search for vsftpd related vulnerabilities, and found that the 2.3.4 version comes with a backdoor. Searching on metasploit, it found that the vulnerability cannot be exploited.

Instead, I looked for the samba 3.0.20 version vulnerability, and found an excellent level vulnerability on msf. Fill in the IP and exploit to execute:

Bounce back to the shell.

获取flag

user.txt

1

cat /home/makis/user.txt

root.txt

1

cat /root/root.txt