SolarLab-HackTheBox
信息搜集
nmap扫描端口
nmap -sV -v 10.10.11.16
扫描结果如下
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.24.0
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
445/tcp open microsoft-ds?
观察到445端口开放存在Microsoft-DS服务，用smb查看一下
smbclient -L 10.10.11.16
用Documents登录一下
smbclient \\\\10.10.11.16\\Documents
我们注意到有个xlsx表格文件，使用get命令下载下来
打开看看发现有用户信息，应该能利用登录
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Devvortex - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/f8775eca4f0a405baa39c6dcdf1518a4.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] CozyHosting - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/cbc357adc46f47a8ae79ad7b8c5a3755.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Sau - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/3aab8ccd15b54048a533df78207cc09d.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Keeper - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/4e5d65b4a95b460da3b04ea910294efd.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Zipping - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/132729ea453f4fd1962578d37a3c4a7a.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Manager - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/8381fa864b1342909749e6057783f123.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>]Three - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/aefaa4892dc24cc599941e628f773d77.png)
![[<span style='color:red;'>渗透</span><span style='color:red;'>测试</span><span style='color:red;'>学习</span>] Hospital - <span style='color:red;'>HackTheBox</span>](https://img-blog.csdnimg.cn/direct/c341f9042d504c7caf631e7b31ba7488.png)
