BoardLight-HackTheBox
信息搜集
nmap扫描一下
nmap -sV -v 10.10.11.11
扫描结果如下
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.11 (Ubuntu Linux; protocol 2.0)
80/tcp open http Apache httpd 2.4.41 ((Ubuntu))
80端口有http服务并且为apache中间件，尝试访问一下
拉到最下面得到域名信息board.htb，添加到hosts文件中成功访问
爆破下子域名，得到crm.board.htb
gobuster vhost -u http://board.htb/ -w /home/rev1ve/shentou/dict/zi-yu-ming/subdomains-10000.txt --append-domain
同理添加到hosts文件即可访问，注意到Dolibarr 17.0.0
不过大部分漏洞都要登录到后台界面才能利用，猜测存在admin用户
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Devvortex - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/f8775eca4f0a405baa39c6dcdf1518a4.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] CozyHosting - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/cbc357adc46f47a8ae79ad7b8c5a3755.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Sau - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/3aab8ccd15b54048a533df78207cc09d.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Keeper - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/4e5d65b4a95b460da3b04ea910294efd.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Zipping - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/132729ea453f4fd1962578d37a3c4a7a.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Manager - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/8381fa864b1342909749e6057783f123.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>]Three - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/aefaa4892dc24cc599941e628f773d77.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Hospital - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/c341f9042d504c7caf631e7b31ba7488.png)
