Difference between revisions of "W1R3S: 1.0.1 ~ VulnHub - CTF Walkthrough"
(Created page with "== Objective == xxxxxxxxxxxxxxxxxxxxx Source: https://www.vulnhub.com/xxxx xxxxxx Status: [<span style="color:green">Completed</span>] == Methodology == === Discovery...") |
m (→Entry Point #1 - Port NN (XXX)) |
||
| Line 33: | Line 33: | ||
</syntaxhighlight> | </syntaxhighlight> | ||
| − | === Entry Point #1 - Port | + | === Entry Point #1 - Port 80 (HTTP) === |
==== Enumeration ==== | ==== Enumeration ==== | ||
| + | A quick scan with '''dirb''' came back with two directories '''wordpress''' and '''administrator'''. The former runs the obvious - '''Word Press''', the latter - '''CUPA CMS''' | ||
<syntaxhighlight lang=shell-session highlight="" line> | <syntaxhighlight lang=shell-session highlight="" line> | ||
xxxxx | xxxxx | ||
Revision as of 06:54, 20 June 2018
Contents
Objective
xxxxxxxxxxxxxxxxxxxxx
Source: [xxxxxx]
Status: [Completed]
Methodology
Discovery
root@blaksec:/ # export TANGO=192.168.56.101root@kali:~/Desktop/w1r3s# nmap -O -sT -sV -p- -T5 192.168.56.101
Starting Nmap 7.60 ( https://nmap.org ) at 2018-03-26 19:01 EDT
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers
Nmap scan report for 192.168.56.101
Host is up (0.00093s latency).
Not shown: 55528 filtered ports, 10003 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.8 or later
22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.4 (Ubuntu Linux; protocol 2.0)
80/tcp open http Apache httpd 2.4.18 ((Ubuntu))
3306/tcp open mysql MySQL (unauthorized)
MAC Address: 08:00:27:CB:EE:8B (Oracle VirtualBox virtual NIC)
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.10 - 4.8
Network Distance: 1 hop
Service Info: Host: W1R3S.inc; OS: Linux; CPE: cpe:/o:linux:linux_kernelEntry Point #1 - Port 80 (HTTP)
Enumeration
A quick scan with dirb came back with two directories wordpress and administrator. The former runs the obvious - Word Press, the latter - CUPA CMS
xxxxx
xxxxxExploitation
xxx xxx xxx
xxx
xxxxxx
xxx
xxx
Final Notes
xxx
Appendix A: Vulnerability Detail and Mitigation
| Rating | High |
| Description | xxxx |
| Impact | xxxxxxxxxxxxxxxxxxxxxxxxxxxx |
| Remediation | xxxxxxxxxxxxxxxxx |