{"id":711,"date":"2024-07-01T19:13:02","date_gmt":"2024-07-01T11:13:02","guid":{"rendered":"http:\/\/162.14.82.114\/?p=711"},"modified":"2024-07-09T11:50:01","modified_gmt":"2024-07-09T03:50:01","slug":"hmv-_-leet","status":"publish","type":"post","link":"http:\/\/162.14.82.114\/index.php\/711\/07\/01\/2024\/","title":{"rendered":"hmv[-_-]Leet"},"content":{"rendered":"

Leet<\/h1>\n

\"image-20240701145522686\"<\/div>
\n
\"image-20240701152011662\"<\/div><\/p>\n

\u4fe1\u606f\u641c\u96c6<\/h2>\n

\u7aef\u53e3\u626b\u63cf<\/h3>\n
\u250c\u2500\u2500(kali\ud83d\udc80kali)-[~\/temp\/Leet]\n\u2514\u2500$ rustscan -a 192.168.0.197 -- -A\n.----. .-. .-. .----..---.  .----. .---.   .--.  .-. .-.\n| {}  }| { } |{ {__ {_   _}{ {__  \/  ___} \/ {} \\ |  `| |\n| .-. \\| {_} |.-._} } | |  .-._} }\\     }\/  \/\\  \\| |\\  |\n`-' `-'`-----'`----'  `-'  `----'  `---' `-'  `-'`-' `-'\nThe Modern Day Port Scanner.\n________________________________________\n: https:\/\/discord.gg\/GFrQsGy           :\n: https:\/\/github.com\/RustScan\/RustScan :\n --------------------------------------\n\ud83c\udf0dHACK THE PLANET\ud83c\udf0d\n\n[~] The config file is expected to be at "\/home\/kali\/.rustscan.toml"\n[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers\n[!] Your file limit is very small, which negatively impacts RustScan's speed. Use the Docker image, or up the Ulimit with '--ulimit 5000'. \nOpen 192.168.0.197:22\nOpen 192.168.0.197:7777\nPORT     STATE SERVICE REASON  VERSION\n22\/tcp   open  ssh     syn-ack OpenSSH 9.2p1 Debian 2+deb12u2 (protocol 2.0)\n| ssh-hostkey: \n|   256 e1:5d:7c:b7:07:92:17:dc:46:76:7d:be:a9:50:43:d2 (ECDSA)\n| ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBO40ZPJ7m6D4U6cVDKC0tpGfvjWc4qisOha\/4Lw8EEp8kxB8aDZMMiVoZwc8s+H60NNwTUBsp9iZc\/8ZgrPlgn8=\n|   256 a0:f3:b3:86:93:f5:58:82:88:dd:e5:10:db:35:de:62 (ED25519)\n|_ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJt60Bt5N10kc53Nwgf1AM9fZ+78Y0MS7Yq8tYoL7r8i\n7777\/tcp open  http    syn-ack Werkzeug httpd 3.0.1 (Python 3.11.2)\n| http-methods: \n|_  Supported Methods: GET HEAD OPTIONS POST\n|_http-server-header: Werkzeug\/3.0.1 Python\/3.11.2\n|_http-title: Site doesn't have a title (text\/html; charset=utf-8).\nService Info: OS: Linux; CPE: cpe:\/o:linux:linux_kernel<\/code><\/pre>\n
\u76ee\u5f55\u626b\u63cf<\/h3>\n
\u250c\u2500\u2500(kali\ud83d\udc80kali)-[~\/temp\/Leet]\n\u2514\u2500$ gobuster dir -u http:\/\/192.168.0.197:7777\/ -w \/usr\/share\/wordlists\/dirbuster\/directory-list-2.3-medium.txt -x php,zip,bak,txt,html\n===============================================================\nGobuster v3.6\nby OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart)\n===============================================================\n[+] Url:                     http:\/\/192.168.0.197:7777\/\n[+] Method:                  GET\n[+] Threads:                 10\n[+] Wordlist:                \/usr\/share\/wordlists\/dirbuster\/directory-list-2.3-medium.txt\n[+] Negative Status codes:   404\n[+] User Agent:              gobuster\/3.6\n[+] Extensions:              bak,txt,html,php,zip\n[+] Timeout:                 10s\n===============================================================\nStarting gobuster in directory enumeration mode\n===============================================================\n\/download             (Status: 500) [Size: 14478]\nProgress: 19456 \/ 1323366 (1.47%)[ERROR] Get "http:\/\/192.168.0.197:7777\/1756": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\n[ERROR] Get "http:\/\/192.168.0.197:7777\/1756.php": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\n[ERROR] Get "http:\/\/192.168.0.197:7777\/1756.zip": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\n[ERROR] Get "http:\/\/192.168.0.197:7777\/1756.bak": context deadline exceeded (Client.Timeout exceeded while awaiting headers)<\/code><\/pre>\n
\u770b\u6765\u626b\u4e0d\u4e86<\/p>\n
\u6f0f\u6d1e\u626b\u63cf<\/h3>\n
\u250c\u2500\u2500(kali\ud83d\udc80kali)-[~\/temp\/Leet]\n\u2514\u2500$ nikto -h http:\/\/192.168.0.197:7777\n- Nikto v2.5.0\n---------------------------------------------------------------------------\n---------------------------------------------------------------------------\n+ 0 host(s) tested<\/code><\/pre>\n
\u6f0f\u6d1e\u53d1\u73b0<\/h2>\n
\u670d\u52a1\u63a2\u6d4b<\/h3>\n
\u5c1d\u8bd5\u641c\u5bfbopenssh\u6f0f\u6d1e\uff0c\u4f46\u662f\u6ca1\u6709\u6536\u83b7\uff0c\u5c1d\u8bd5\u63a2\u6d4b7777<\/code>\u7aef\u53e3\uff1a<\/p>\n
\"image-20240701152412099\"<\/div><\/p>\n
\u6ca1\u5565\u4e1c\u897f\uff0c\u770b\u4e00\u4e0b\u6e90\u7801\uff0c\u4e5f\u6ca1\u53d1\u73b0\u5565\uff0c\u5c1d\u8bd5\u8fdb\u884c\u6d4b\u8bd5\u8fd9\u4e2a\u8f93\u5165\u6846\uff0c\u8f93\u5165whoami<\/code>\uff1a<\/p>\n
\"image-20240701152510282\"<\/div><\/p>\n
\u5c1d\u8bd5\u8fdb\u884c\u641c\u7d22\uff0c\u627e\u5230\u4e00\u4e2a\u7f51\u7ad9<\/a>\uff1a<\/p>\n
\"image-20240701152944331\"<\/div><\/p>\n
\u8be2\u95ee\u4e00\u4e0bgpt\uff1a<\/p>\n
\n
\u4f60\u63d0\u5230\u7684 "L33T converter" \u901a\u5e38\u6307\u7684\u662f\u4e00\u4e2a\u5c06\u6587\u672c\u8f6c\u6362\u4e3a\u6240\u8c13\u7684 "leet speak" \u6216 "1337 speak" \u7684\u5de5\u5177\u3002\u8fd9\u79cd\u8bed\u8a00\u8f6c\u6362\u662f\u4e00\u79cd\u5c06\u5b57\u6bcd\u66ff\u6362\u4e3a\u770b\u8d77\u6765\u7c7b\u4f3c\u7684\u6570\u5b57\u6216\u7b26\u53f7\u7684\u4fda\u8bed\u5f62\u5f0f\uff0c\u5e38\u89c1\u4e8e\u7f51\u7edc\u6587\u5316\uff0c\u7279\u522b\u662f\u65e9\u671f\u7684\u9ed1\u5ba2\u548c\u6781\u5ba2\u793e\u533a\u3002<\/p>\n
\u5728\u4f60\u7ed9\u51fa\u7684\u4f8b\u5b50\u4e2d\uff1a<\/p>\n