Torabek | Injection from Dockerlabs

IP ni brovserga yozib ko’rsam sayt ishlayapti ekan yana boshqa portlarini ochiq yoki yopiqligini nmap orqali aniqlaymiz .

nmap -sS -sC -sV -p- -T4 172.17.0.2
Starting Nmap 7.99 ( https://nmap.org ) at 2026-09-20 17:11 +0500
Nmap scan report for internal.dl (172.17.0.2)
Host is up (0.0000030s latency).
Not shown: 65532 closed tcp ports (reset)
PORT     STATE SERVICE VERSION
22/tcp   open  ssh     OpenSSH 8.9p1 Ubuntu 3ubuntu0.6 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   256 72:1f:e1:92:70:3f:21:a2:0a:c6:a6:0e:b8:a2:aa:d5 (ECDSA)
|_  256 8f:3a:cd:fc:03:26:ad:49:4a:6c:a1:89:39:f9:7c:22 (ED25519)
80/tcp   open  http    Apache httpd 2.4.52 ((Ubuntu))
|_http-title: Iniciar Sesi\xC3\xB3n
| http-cookie-flags: 
|   /: 
|     PHPSESSID: 
|_      httponly flag not set
|_http-server-header: Apache/2.4.52 (Ubuntu)
3306/tcp open  mysql   MariaDB 10.3.23 or earlier (unauthorized)

3 ta port ochiq ekan . Gobuster yoramida saytning yo’llarini topib ko’ramiz .

config.php bor ekan , unga curl bilan so’rov jo’natib ko’rsak u yerda hech narsa yo’q .

Tepada ochiq portlar orasida MariaDB nomli servis 3306 portda ishlayotgan edi unga sqlmap yordamida default login parol bilan hujum qilib ichida login parollarni topib ko’ramiz .

Topildi.

+------------------+----------+
| passwd           | username |
+------------------+----------+
| KJSDFG789FGSDF78 | dylan    |
+------------------+----------+

IP ni brovserga yozib ko’rsam sayt ishlayapti ekan yana boshqa portlarini ochiq yoki yopiqligini nmap orqali aniqlaymiz .

3 ta port ochiq ekan . Gobuster yoramida saytning yo’llarini topib ko’ramiz .

config.php bor ekan , unga curl bilan so’rov jo’natib ko’rsak u yerda hech narsa yo’q .

Tepada ochiq portlar orasida MariaDB nomli servis 3306 portda ishlayotgan edi unga sqlmap yordamida default login parol bilan hujum qilib ichida login parollarni topib ko’ramiz .

Topildi.

Endi SSH ga shu login parol bilan kirib ko’ramiz .

SSH orqali kirildi . Machine Buzildi .