Jeff_ITBlog

https://www.vulnhub.com/entry/symfonos-3,332/ symfonos: 3.1This mentions the name of this release, when it was released, who made it, a link to 'series' and a link to the homepage of the release. It's common for an author to release multiple 'scenarios', making up a 'series' of machines to attack.www.vulnhub.com  Reconnaissance└─$ sudo nmap -sn 192.168.45.0/24 -oA ./recon/targetScanNmap scan rep..

https://www.vulnhub.com/entry/dc-9,412/ DC: 9This mentions the name of this release, when it was released, who made it, a link to 'series' and a link to the homepage of the release. It's common for an author to release multiple 'scenarios', making up a 'series' of machines to attack.www.vulnhub.com이 DC: 9 은 포트노킹에 대한 실습인데, 포트 노킹은 한번도 해보지 않아서 타쿠대디님 가이드를 읽으면서 실습을 진행하였습니다.타쿠대디님 길잡이를 해주셔서 감사합니다!!  실습..

https://www.vulnhub.com/entry/vulnos-2,147/ VulnOS: 2This mentions the name of this release, when it was released, who made it, a link to 'series' and a link to the homepage of the release. It's common for an author to release multiple 'scenarios', making up a 'series' of machines to attack.www.vulnhub.com 실습 환경 : VirtualBox  Reconnaissance└─$ sudo nmap -sn 192.168.45.0/24Nmap scan report for 19..

https://www.vulnhub.com/entry/fristileaks-13,133/ FristiLeaks: 1.3This mentions the name of this release, when it was released, who made it, a link to 'series' and a link to the homepage of the release. It's common for an author to release multiple 'scenarios', making up a 'series' of machines to attack.www.vulnhub.com실습 환경 : VirtualBox VirtualBox에서 파일 -> 가상머신 가져오기 -> 다운받은 ova 파일 선택 -> 설정 -> 네트워..

오랜만에 게시글 포스팅합니다.마지막 블로그 글 이후에 모의해킹 강의도 듣고 이것저것 공부하는데 벌써 몇달이 흘러버렸네요,, 다시 제가 공부하는 것들 해킹 관련된 문제 Write-Up 등등 다양하게 다시 포스팅 할 예정입니다. 다시 한번 잘 부탁 드리겠습니다.Carve-Party할로윈 파티를 기념하기 위해 호박을 준비 했다고 한다. 호박을 10000번 클릭하면 플래그를 획득할 수 있다.문제를 다운받고 접속하면 아주 귀여운 호박이 우릴 맞이해준다ㅋㅋㅋ  이 호박은 누를때 마다 10000에서 -1 씩 카운트가 줄어든다.페이지 소스에서 자바스크립트 코드를 확인한 결과 길고 복잡한 코드들이 나오는데 그중에서 중점적으로 봐야할 코드를 아래에 적어놓았다.$(function() { $('#jack-target').c..

풀이 rcity18@9947d876f6e5:~$ ls -l total 4 -rw-r--r-- 1 root root 918 Mar 6 08:04 rcity19 rcity18@9947d876f6e5:~$ head rcity19 Flag components: adding one by one adding one by one adding one by one adding one by one adding one by one adding one by one adding one by one adding one by one adding one by one 뭔가 엄청나게 많은 것같다 rcity18@9947d876f6e5:~$ git log commit 7599ad53e055ece5b61ef8b81f149940187bd35f..

풀이 rcity17@9947d876f6e5:~$ ls rcity18 rcity17@9947d876f6e5:~$ cat rcity18 Initial commit Add feature A Add feature B 별 다른 내용 없다 rcity17@9947d876f6e5:~$ git log commit ace1b3e50dc2d3e51d56174ae9df97751b28317a (HEAD -> master) Author: rcity17 Date: Wed Mar 6 08:04:14 2024 +0000 Add feature B by Alice commit 6c18974e94e36f197b21d1229eaab6c6da6b6d42 Author: rcity17 Date: Wed Mar 6 08:04:14 2024 +000..

풀이 rcity16@9947d876f6e5:~$ ls -al total 36 drwxr-xr-x 1 root root 4096 Mar 6 08:04 . drwxr-xr-x 1 root root 4096 Mar 6 08:03 .. -rw-r--r-- 1 root root 220 Jan 6 2022 .bash_logout -rw-r--r-- 1 root root 3771 Jan 6 2022 .bashrc dr-xrw---- 8 rcity16 root 4096 Mar 6 08:04 .git -rw-rw-r-- 1 rcity16 rcity16 34 Mar 6 08:04 .gitconfig -rw-r--r-- 1 root root 807 Jan 6 2022 .profile -rw-r--r-- 1 root root..

풀이 rcity15@9947d876f6e5:~$ ls rcity14-flag.txt rcity15-data.bin rcity15@9947d876f6e5:~$ file rcity15-data.bin rcity15-data.bin: data rcity15@9947d876f6e5:~$ xxd rcity15-data.bin 00000000: 273b 3673 353f 3234 733a 2073 2965 0260 ';6s5?24s: s)e.` 00000010: 3e6b 0b67 2062 1466 3b6a 0164 3763 1f0a >k.g b.f;j.d7c.. 00000020: 0a6b 6579 2069 7320 3533 0a .key is 53. rcity15-data.bin 이라는 바이너리 파일이 있는데 파일..

풀이 rcity14@35e08a7255bf:~$ ls rcity13-flag.txt rcity14@35e08a7255bf:~$ pwd /home/rcity14 rcity14@35e08a7255bf:~$ cd /home/rcity15 rcity14@35e08a7255bf:/home/rcity15$ ls rcity14-flag.txt rcity15-data.bin rcity14@35e08a7255bf:/home/rcity15$ cat rcity14-flag.txt cat: rcity14-flag.txt: Permission denied rcity15의 홈 디렉토리에 들어가서 확인하려고 하니 Permission denied 가 떳다 간단히 sudo -l 을 이용하여 문제를 풀 수 있을 것 같다 현재 계정의 s..