Blueprint

端口扫描

root@ip-10-10-182-247:~# nmap -sT -p- --min-rate 1000 10.10.109.203

Starting Nmap 7.60 ( https://nmap.org ) at 2023-08-29 07:46 BST
Warning: 10.10.109.203 giving up on port because retransmission cap hit (10).
Stats: 0:00:19 elapsed; 0 hosts completed (1 up), 1 undergoing Connect Scan
Connect Scan Timing: About 4.94% done; ETC: 07:53 (0:06:25 remaining)
Nmap scan report for ip-10-10-109-203.eu-west-1.compute.internal (10.10.109.203)
Host is up (0.00034s latency).
Not shown: 43973 closed ports, 21549 filtered ports
PORT      STATE SERVICE
80/tcp    open  http
135/tcp   open  msrpc
139/tcp   open  netbios-ssn
443/tcp   open  https
445/tcp   open  microsoft-ds
3306/tcp  open  mysql
8080/tcp  open  http-proxy
49152/tcp open  unknown
49153/tcp open  unknown
49154/tcp open  unknown
49158/tcp open  unknown
49159/tcp open  unknown
49160/tcp open  unknown
MAC Address: 02:86:AB:FC:61:FD (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 407.19 seconds

出了点意外无法实现我的目标, 之间使用 MSF 的 model exploit/multi/http/oscommerce_installer_unauth_code_exec