HTB-靶机Zipper-writeup 18
Usually scan,nmap+dirb+gobuster+msftcp find zabbix,ver3.0.21: think about zabbix has jsrpc.php,any exploit?,json interface is not authorized...
Spawning a TTY Shell-逃逸linux各种shell来执行命令
python -c 'import pty; pty.spawn("/bin/sh")' echo os.system('/bin/bash') /bin/sh -i perl —e 'exec "/bin/sh";' perl: exec...
搜索当前分类