CTFShow-WEB入门-sql-labs WEB-517-联合注入字符型注入,闭合方式是' 尝试1'--+,发现报错,说明闭合正确 使用union 联合注入 (1)、查看回显列数 1?id=-1' order by 3--+ 发现有3列回显值 (2)、查看数据库中的所有数据库名称 1?id=-1' union select 1,group_concat(schema_name),3 from info 2025-07-22 CTFShow #WEB入门 #sql-labs
Magic 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/magic]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-22 21:08 CSTNmap scan r 2025-07-22 Maze-sec #xxe注入 #smb #redis
Change 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/change]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-21 10:29 CSTNmap scan 2025-07-22 Maze-sec #mysql #wordpress #sudo-ffmpeg
Ajpsvr 靶机说明QQ群:660930334参考wp复现:https://7r1umphk.github.io/post/nei-bu-_ajpsvr.html 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/ajpsvr]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( htt 2025-07-21 Maze-sec #ajp服务,sudo-apk
5ud0 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/5ud0]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-15 15:41 CSTNmap scan re 2025-07-16 Maze-sec #Textpattern CMS #文件上传 #CVE-2025-32463
Sneak 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/sneak]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-14 19:04 CSTNmap scan r 2025-07-15 Maze-sec #文件上传 #ssh私钥格式 #sudo-more
Tree 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/tree]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-13 21:32 CSTNmap scan re 2025-07-14 Maze-sec #xpath注入 #sudo-tree
Sml 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/sml]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-10 15:36 CSTNmap scan re 2025-07-13 Maze-sec #employee_records_system #提权-库文件
Backdoor1 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/backdoor1]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-09 20:15 CSTNmap sc 2025-07-13 Maze-sec #FUFF #提权-dpkg-v #提权-pam_unix.so
Sudo 靶机说明QQ群:660930334 一、主机探测123456789101112131415┌──(root㉿kali)-[/miao/maze-sec/sudo]└─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-07-11 14:13 CSTNmap scan r 2025-07-13 Maze-sec #Tiny File Manager #CVE-2025-32462