vulnhub靶机实战-My-cmsms靶机_VulnHub-DarkHole_2靶机实战(超详细保姆级教程)-CSDN博客资源-CSDN文库

需积分: 5 150 浏览量 2023-09-29 18:04:37 上传评论 1 收藏 1.86MB PDF 举报

资源推荐

资源详情

资源评论

第 26 页共 75 页 vulnhub 靶机系列实战

第七靶

My-cmsms

靶机

7.1 主机发现

7.1.1 ARP 做主机发现

sudo arp-scan -l

靶机，mac 地址 08:00:27:da:cf:dd

7.2 端口扫描

7.2.1 nmap 做端口扫描

Nmap -sV -A -p- 192.168.137.241

Starting Nmap 7.92 ( https://nmap.org ) at 2023-04-28 23:17 EDT

Nmap scan report for mycmsms.mshome.net (192.168.137.241)

Host is up (0.00046s latency).

Not shown: 65531 closed tcp ports (reset)

PORT STATE SERVICE VERSION

22/tcp open ssh OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0)

| ssh-hostkey:

| 2048 27:21:9e:b5:39:63:e9:1f:2c:b2:6b:d3:3a:5f:31:7b (RSA)

| 256 bf:90:8a:a5:d7:e5:de:89:e6:1a:36:a1:93:40:18:57 (ECDSA)

|_ 256 95:1f:32:95:78:08:50:45:cd:8c:7c:71:4a:d4:6c:1c (ED25519)

80/tcp open http Apache httpd 2.4.38 ((Debian))

|_http-server-header: Apache/2.4.38 (Debian)

|_http-title: Home - My CMS

3306/tcp open mysql MySQL 8.0.19

| ssl-cert: Subject: commonName=MySQL_Server_8.0.19_Auto_Generated_Server_Certificate

| Not valid before: 2020-03-25T09:30:14

|_Not valid after: 2030-03-23T09:30:14

|_ssl-date: TLS randomness does not represent time

| mysql-info:

| Protocol: 10

| Version: 8.0.19

| Thread ID: 42

| Capabilities flags: 65535

| Some Capabilities: ODBCClient, ConnectWithDatabase, SupportsLoadDataLocal, LongPassword,

SupportsCompression, Speaks41ProtocolNew, Speaks41ProtocolOld,

DontAllowDatabaseTableColumn, IgnoreSigpipes, InteractiveClient, LongColumnFlag,

vulnhub 靶机系列实战

第

页共

页

SwitchToSSLAfterHandshake, SupportsTransactions, IgnoreSpaceBeforeParenthesis, FoundRows,

Support41Auth, SupportsAuthPlugins, SupportsMultipleStatments, SupportsMultipleResults

| Status: Autocommit

| Salt: \x7F\x01"hyXs&NgUY\x05s%Ebxd\x1B

|_ Auth Plugin Name: mysql_native_password

33060/tcp open mysqlx?

| fingerprint-strings:

| DNSStatusRequestTCP, LDAPSearchReq, NotesRPC, SSLSessionReq, TLSSessionReq, X11Probe,

afp:

| Invalid message"

|_ HY000

1 service unrecognized despite returning data. If you know the service/version, please submit the

following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :

SF-Port33060-TCP:V=7.92%I=7%D=4/28%Time=644C8C55%P=x86_64-pc-linux-gnu%r(N

SF:ULL,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(GenericLines,9,"\x05\0\0\0\x0b\

SF:x08\x05\x1a\0")%r(GetRequest,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(HTTPOp

SF:tions,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(RTSPRequest,9,"\x05\0\0\0\x0b

SF:\x08\x05\x1a\0")%r(RPCCheck,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(DNSVers

SF:ionBindReqTCP,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(DNSStatusRequestTCP,2

SF:B,"\x05\0\0\0\x0b\x08\x05\x1a\0\x1e\0\0\0\x01\x08\x01\x10\x88'\x1a\x0fI

SF:nvalid\x20message\"\x05HY000")%r(Help,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")

SF:%r(SSLSessionReq,2B,"\x05\0\0\0\x0b\x08\x05\x1a\0\x1e\0\0\0\x01\x08\x01

SF:\x10\x88'\x1a\x0fInvalid\x20message\"\x05HY000")%r(TerminalServerCookie

SF:,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(TLSSessionReq,2B,"\x05\0\0\0\x0b\x

SF:08\x05\x1a\0\x1e\0\0\0\x01\x08\x01\x10\x88'\x1a\x0fInvalid\x20message\"

SF:\x05HY000")%r(Kerberos,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(SMBProgNeg,9

SF:,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(X11Probe,2B,"\x05\0\0\0\x0b\x08\x05\

SF:x1a\0\x1e\0\0\0\x01\x08\x01\x10\x88'\x1a\x0fInvalid\x20message\"\x05HY0

SF:00")%r(FourOhFourRequest,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(LPDString,

SF:9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(LDAPSearchReq,2B,"\x05\0\0\0\x0b\x0

SF:8\x05\x1a\0\x1e\0\0\0\x01\x08\x01\x10\x88'\x1a\x0fInvalid\x20message\"\

SF:x05HY000")%r(LDAPBindReq,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(SIPOptions

SF:,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(LANDesk-RC,9,"\x05\0\0\0\x0b\x08\x

SF:05\x1a\0")%r(TerminalServer,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(NCP,9,"

SF:\x05\0\0\0\x0b\x08\x05\x1a\0")%r(NotesRPC,2B,"\x05\0\0\0\x0b\x08\x05\x1

SF:a\0\x1e\0\0\0\x01\x08\x01\x10\x88'\x1a\x0fInvalid\x20message\"\x05HY000

SF:")%r(JavaRMI,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(WMSRequest,9,"\x05\0\0

SF:\0\x0b\x08\x05\x1a\0")%r(oracle-tns,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r

SF:(ms-sql-s,9,"\x05\0\0\0\x0b\x08\x05\x1a\0")%r(afp,2B,"\x05\0\0\0\x0b\x0

SF:8\x05\x1a\0\x1e\0\0\0\x01\x08\x01\x10\x88'\x1a\x0fInvalid\x20message\"\

SF:x05HY000")%r(giop,9,"\x05\0\0\0\x0b\x08\x05\x1a\0");

MAC Address: 08:00:27:DA:CF:DD (Oracle VirtualBox virtual NIC)

Device type: general purpose

Running: Linux 4.X|5.X

剩余32页未读，继续阅读

评论收藏

内容反馈

昵称还在想呢

粉丝: 1804
资源: 10

vulnhub靶机实战-My-cmsms靶机

VulnHub 靶机系列实战教程.pdf

Vulnhub靶机渗透测试 DC-7靶机

Vulnhub靶机渗透测试 DC-8靶机

Vulnhub靶机渗透测试 DC-9靶机

Vulnhub靶机渗透测试 DC-3靶机

Vulnhub靶机渗透测试 DC-1靶机

Vulnhub靶机渗透测试 Five-1靶机

Vulnhub靶机渗透测试 Five-3靶机

Vulnhub靶机系列：De-ICE: S1.120

靶机GoldenEye-V1练习报告1

65.Vulnhub靶机渗透之环境搭建及JIS-CTF入门和蚁剑提权示例（一）1

渗透测试实战-Fowsniff靶机入侵-附件资源

66.Vulnhub靶机渗透之DC-1提权和Drupal漏洞利用（二）1

部署-阿里云服务器搭建靶机教程-2020.8.18.docx

Vulnhub靶机系列：Kioptrix: Level 1.2 (#3)

CTF6靶机实战.zip

VulnHub-Tr0ll1.zip

靶机-DC1通关详细过程

最新版ISO/IEC 27001:2022、ISO 27002:2022中英文合集

Goby红队版-win-x64-2.4.7版本

Chrome Header Editor 插件

ISO SAE 21434-2021 中文版.pdf

OpenVAS GVM 中文翻译补丁

安全认证cisp教材全套

现代永磁同步电机控制原理及MATLAB仿真__袁雷编著1

全面的安全基线核查清单

OpenVAS离线资源

2024最新：Hvv中常见的面试问题

最新资源