Intrusion penetration sell envelope scam Station
Last night, a friend suddenly sent an envelope-selling scam station in the group. before dinner, he was bored. He copied the guy and checked it with my friend. This guy probably lied to many people. Many people on Baidu QQ said he was a liar.
When the main site finds the background and tries to use a weak password, a friend of mine says that he knows what the template is, but he cannot remember the name at the time. Okay, forgive him. The social worker tried the QQ number and tried FTP weak passwords. The security was good.
Yu Jian swept more than 100 sub-sites. My friend simply won a shell and won't say much about it. Here I will mainly discuss privilege escalation. Let's take a look at the shell. It supports aspx and php:
Open ports 21, 1433, and 3306. It seems there are sa and root, but I gave up this idea when I think of a virtual machine. We do not support aspx. It is the king to switch to aspx and execute commands.
The page is a bit cool and cool, and cannot execute commands. It is no different from aspx not supported. Then I had no idea when I went around the east and west. I suddenly thought about it in the group. One day, a group of net users shouted a few ads to raise the right. Because I prefer to study and raise the right, I will add him. It's boring. If you have nothing to do, you can talk about it.
He just gave up when he saw that he could not execute the command. If he looked at it carefully, it was estimated that someone else could give it up.
I can't say it to Daniel. Come on. Slowly, I was not in a hurry to raise the right. One of the longest servers raised the right for one day and one night. This does not include the shell time. Upload a directory scan script of ad to check whether the directory has the write permission.
Over an hour later, I found this important information:
Next, execute the command using MSSQL of ASP Dama:
I passed a VBS reading the IIS account password and successfully logged on to the target scammers website FTP:
The goal has been achieved. I have prepared to put him on a black page and fight against scammers. Everyone is responsible!
