No image

Security/Wargame

[Hackthebox] - Cap Writeup(문제풀이)

Footholdings 아래는 nmap 결과입니다. # nmap -sV -sT -sC -Pn 10.10.10.245 PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.3 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.2 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: |_ 256 3f:d0:ff:91:eb:3b:f6:e1:9f:2e:8d:de:b3:de:b2:18 (ED25519) 80/tcp open http gunicorn | fingerprint-strings: | FourOhFourRequest: | HTTP/1.0 404 NOT FOUND | Server: gunicorn | Date..

by 알 수 없는 사용자 2021. 7. 6.

No image

Security/Wargame

[Hackthebox] - Legacy Writeup(문제풀이)

PORT STATE SERVICE VERSION 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds Windows XP microsoft-ds 3389/tcp closed ms-wbt-server Service Info: OSs: Windows, Windows XP; CPE: cpe:/o:microsoft:windows, cpe:/o:microsoft:windows_xp Host script results: |_clock-skew: mean: -4h29m58s, deviation: 2h07m16s, median: -5h59m58s |_nbstat: NetBIOS name: LEGACY, NetBIOS user: ..

by 알 수 없는 사용자 2021. 6. 9.

No image

Security/Wargame

[Hackthebox] - Grandpa Writeup(문제풀이)

References CVE-2017-7269 : Microsoft IIS 6.0 - WebDAV 'ScStoragePathFromUrl' Remote Buffer Overflow CVE-2014-4076 : Microsoft Windows Server 2003 SP2 - TCP/IP IOCTL Privilege Escalation (MS14-070) 바로 이전의 Granny 문제와 유사하여 유사한 흐름으로 진행하였습니다. # nmap -sV -sT -sC -Pn 10.10.10.14 PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 6.0 | http-methods: |_ Potentially risky methods: TRACE COPY ..

by 알 수 없는 사용자 2021. 6. 9.