除夕纪事 坐过飞机，搭上巴士，再转小汽车，跨越上千公里，我又回到了山中外婆家。如果是在宫崎骏的动画里，远离城市的乡村应该画的很美吧。可惜不是，外婆住的地方靠近一个大坝，除了一条河一条公路，什么也没有。。 一开始十分不适应，烧炭取暖，如厕不便都让我十分不耐烦。 我老是心心念念地学渗透，开着移动数据，网速十分差劲，让我十分不爽(* ￣︿￣) 今晚是除夕夜，我和妹妹沿着沅江散步，天渐渐黑了起来。山中房屋稀疏的坐落 2019-02-03 View View
raven2（CVE-2016-10033） 12322/tcp open ssh OpenSSH 6.7p1 Debian 5+deb8u4 (protocol 2.0)80/tcp open http Apache httpd 2.4.10 ((Debian))111/tcp open rpcbind 2-4 (RPC #100000) try1-ssh用户枚举123python ssh.py --userList 2019-02-01 training training
ms08-067 10.10.10.4 masscan + nmap123Discovered open port 139/tcp on 10.10.10.4 Discovered open port 137/udp on 10.10.10.4 Discovered ope 2019-01-29 training training windows
永恒之蓝 10.10.10.40 12345678910135/tcp open msrpc Microsoft Windows RPC139/tcp open netbios-ssn Microsoft Windows netbios-ssn445/tcp open microsoft-ds Windows 7 Professional 7601 Service Pack 2019-01-22 training training windows
Mirai（物联网设备默认密码） 10.10.10.48 扫描123456789101112131415PORT STATE SERVICE VERSION53/tcp open domain dnsmasq 2.76| dns-nsid: |_ bind.version: dnsmasq-2.76Service detection performed. Please report any incorrect resul 2019-01-21 training training weak password
web常见漏洞--文件上传 参考资料： https://www.cnblogs.com/milantgh/p/3601724.htmlhttps://www.waitalone.cn/bypassing-the-file-upload-validation.html 上一篇：常见web漏洞-command execution 第一个直接上传，什么都没限制 第二个，传php，会提示no PHP 传jpg，正常上传 2019-01-20 web web
Blocky（源码泄露、java反编译） 10.10.10.37 123421/tcp open ftp ProFTPD 1.3.5a22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.2 (Ubuntu Linux; protocol 2.0)80/tcp open http Apache httpd 2.4.18 ((Ubuntu))2 2019-01-19 training training
Active（windows smb共享硬盘） 参考资料：smbclient scan1234567891011121314151617181920212223242526272853/tcp open domain Microsoft DNS 6.1.7601| dns-nsid: |_ bind.version: Microsoft DNS 6.1.7601 (1DB15D39)88/tcp open ker 2019-01-15 training training
Access（port:23-telnet登入反弹cmd） 123456789101112Nmap scan report for 10.10.10.98Host is up (0.13s latency).Not shown: 997 filtered portsPORT STATE SERVICE21/tcp open ftp23/tcp open telnet80/tcp open httpnmap -sV -p 21,23,80 10.1 2019-01-11 training training windows port 23
Devel（ftp匿名登陆可读可写） 10.10.10.5 12321/tcp open ftp Microsoft ftpd80/tcp open http Microsoft IIS httpd 7.5 ftp12345678910111213141516171819ftp 10.10.10.5anonymous03-18-17 01:06AM <DIR> aspnet 2019-01-10 training training windows port 21