Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

資訊收集 Information Gathering – 手動指令

取得目標一般使用者權限時,能訪問的服務可能都是基本的。

因此我們需要用一些方法,讓我們取得更多的訪問權限。

訊息收集

首先要盡可能的收集有關帳戶的相關訊息。

用戶指令

whoami

net user <user>

id

主機名稱

hostname

系統版本資訊

systeminfo

Linux 上則是

cat /etc/issue

cat /etc/*-release

查看 Process

tasklist /SVC

Linux 上則是

ps axu

收集 網路資訊

ipconfig /all

netstat -ano

ip a

Linux 則是

ss -anp

收集防火牆資訊

netsh advfirewall show currentprofile

查規則

netsh advfirewall firewall show rule name=all

收集排程訊息

ls -lah /etc/cron*

cat /etc/crontab

列出安裝的程式

wmic product get name, version, vendor

找可寫的檔案

find / -writable -type d 2>/dev/null

看硬碟

mountvol

cat /etc/fstab

以上是手動去偵查的一些指令,下一篇會帶來自動化去掃描的工具。

Back To Top
error: 內容被保護 !!
Buy Me A Coffee
歡迎贊助 sectools.tw 讓這個網站更好~!