SkyTower: 1

考点： sqlinject,proxychains-ng,commandinject

靶机链接： https://www.vulnhub.com/entry/skytower-1,96/

环境配置 #

名称	IP
Kali Linux	10.0.2.15
SKYTOWER: 1	10.0.2.44

初步打点 #

端口扫描 #

$ export rip=10.0.2.44
$ sudo nmap -v -A -p- $rip
PORT     STATE    SERVICE    VERSION
22/tcp   filtered ssh
80/tcp   open     http       Apache httpd 2.2.22 ((Debian))
|_http-title: Site doesn't have a title (text/html).
| http-methods: 
|_  Supported Methods: GET HEAD POST OPTIONS
|_http-server-header: Apache/2.2.22 (Debian)
3128/tcp open     http-proxy Squid http proxy 3.1.20
|_http-title: ERROR: The requested URL could not be retrieved
| http-open-proxy: Potentially OPEN proxy.
|_Methods supported: GET HEAD
|_http-server-header: squid/3.1.20