Some of my systems are improperly configured to make all hosts controllable.

Some of my systems are improperly configured to make all hosts controllable.

~~~~~

Accidentally swept this http://cr.kuwo.cn/.svn/entries

No way to download the source code, but there is an ip in it, 60.28.201.5 direct access to only one test page, nmap scan the port, there is a lot of open

All backgrounds,

Http: // 60.28.210.99: 4000/

Zabbix is found and SQL Injection exists.

Get the Administrator account wanghaihao password Q654321

Then the host is controllable, and the number of hosts is really large.

Run ifconfig

You can execute any command to rebound the shell on the Intranet.

Run ifconfig
 

 

Solution:

~~~~