VulnHub靶场学习_HA:Forensics

提示：扫一扫查出行
【扫一扫了解最新限行尾号】
复制提示

HA:Forensics

Vulnhub靶场

下载地址：https://www.vulnhub.com/entry/ha-forensics,570/

背景：

HA: Forensics is an intermediate level of the lab, which gives you a hand on real-life experience in Cyber Forensic Investigation. This lab is completely dedicated to methods and tools of Cyber Forensic Investigation and there is evidence that can be found with various techniques. As it is a Capture-the-Flag, it is very important to note that it is not a root challenge, and comes with a primary motive to find all the flags.

No. of Flags: 4

Objective: Find all 4 flags (Getting Root is NOT the objective)

获取4个Flag

端口扫描

SSH连接192.168.139.148

无提示

http://192.168.139.148/style2/design.gif

查看每帧未发现隐藏图层

目录扫描

http://192.168.139.148/images/

存在两张首页未显示的照片

使用十六进制查看器查看fingerprint.jpg

Flag:1 {bc02d4ffbeeab9f57c5e03de1098ff31}

http://192.168.139.148/style/ 为Css文件

通过扫描查看有无备份文件等文件。

发现存在flag.zip和tips.txt

查看http://192.168.139.148/igolder/

http://192.168.139.148/igolder/clue.txt

PGP生成的私钥及使用公钥加密的信息

PGP加密了的信息

通过在线解密PGP，密码为空

https://youritmate.us/pgp/

获得提示：

In case the forensic investigator forgets his password, this hint can help him, where the password is of 6 characters long , starting 3 characters is the word "for" and the ending 3 characters are numeric

如果法医调查员忘记了密码，这个提示可以帮助他，密码长度为6个字符，起始的3个字符是单词“for”，结束的3个字符是数字

直接生成字典跑。