game z

收集信息

image-20221114185918114

我们登录80端，发现sqli

image-20221114191007470

image-20221114190940626

得到密码videogamer124

ssh 反向

image-20221114191818358

Reverse SSH port forwarding specifies that the given port on the remote server host is to be forwarded to the given host and port on the local side.

ssh反向隧道

从外走到内

从而获得更多权限

然后，我们使用msf

再设置

payload cmd/unix/reverse

show options

该填的填一下就好了

-------------------完-------------------