A system of founder broadband, getshell, can penetrate through the Intranet.

A system of founder broadband, getshell, can penetrate through the Intranet.

Getshell of a system

Run the getshell Intranet ip address command in the founder broadband survey system.

Root permission

http://59.108.66.229:8083/Questionnaire/login.action

Shell:

Http: // 59.108.66.229: 8083/Questionnaire/fz. jsp
 

 

eth0      Link encap:Ethernet  HWaddr 78:2B:CB:76:8C:A4            inet addr:172.20.1.47  Bcast:172.20.7.255  Mask:255.255.248.0          inet6 addr: fe80::7a2b:cbff:fe76:8ca4/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:139548155 errors:0 dropped:0 overruns:0 frame:0          TX packets:13630728 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:3066213502 (2.8 GiB)  TX bytes:3569312386 (3.3 GiB)          Interrupt:106 Memory:d6000000-d6012800 lo        Link encap:Local Loopback            inet addr:127.0.0.1  Mask:255.0.0.0          inet6 addr: ::1/128 Scope:Host          UP LOOPBACK RUNNING  MTU:16436  Metric:1          RX packets:36961206 errors:0 dropped:0 overruns:0 frame:0          TX packets:36961206 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:0           RX bytes:1162542606 (1.0 GiB)  TX bytes:1162542606 (1.0 GiB)

Intranet ip address and root permission

root:$1$DPGMlyAq$S3ScTq8.aIj0gM.ScdtYe1:16038:0:99999:7:::bin:*:15463:0:99999:7:::daemon:*:15463:0:99999:7:::adm:*:15463:0:99999:7:::lp:*:15463:0:99999:7:::sync:*:15463:0:99999:7:::shutdown:*:15463:0:99999:7:::halt:*:15463:0:99999:7:::mail:*:15463:0:99999:7:::news:*:15463:0:99999:7:::uucp:*:15463:0:99999:7:::operator:*:15463:0:99999:7:::games:*:15463:0:99999:7:::gopher:*:15463:0:99999:7:::ftp:*:15463:0:99999:7:::nobody:*:15463:0:99999:7:::nscd:!!:15463:0:99999:7:::vcsa:!!:15463:0:99999:7:::rpc:!!:15463:0:99999:7:::mailnull:!!:15463:0:99999:7:::smmsp:!!:15463:0:99999:7:::pcap:!!:15463:0:99999:7:::ntp:!!:15463:0:99999:7:::dbus:!!:15463:0:99999:7:::avahi:!!:15463:0:99999:7:::sshd:!!:15463:0:99999:7:::rpcuser:!!:15463:0:99999:7:::nfsnobody:!!:15463:0:99999:7:::haldaemon:!!:15463:0:99999:7:::avahi-autoipd:!!:15463:0:99999:7:::distcache:!!:15463:0:99999:7:::apache:!!:15463:0:99999:7:::oprofile:!!:15463:0:99999:7:::webalizer:!!:15463:0:99999:7:::squid:!!:15463:0:99999:7:::xfs:!!:15463:0:99999:7:::gdm:!!:15463:0:99999:7:::sabayon:!!:15463:0:99999:7:::mysql:!!:15467:0:99999:7:::oracle:$1$OcumZNY7$NH1ObKIKLuL6Oqj.elqd10:15841:0:99999:7:::

 

Solution:

Upgrade System

Troubleshoot Server shell