Introduction
Referring to NetSecFocus Trophy Room, here is the information and steps for the machine, Nibbles.
Information
- Victim IP??? 10.10.10.75
- Attack IP??? 10.10.16.5
Vulnerability description
- Nibbleblog is vulnerable to CVE-2015–6967.
- The website is using weak password.
- There is an issue with improperly configured permissions for the monitor.sh.
Attack Steps
Enumerate
Use command `rustscan -u 5000 -a 10.10.10.75 — -sVC -oN tcp.txt` scan the open tcp port and use nmap scan service detail information.