HTB – Starting

2023/03/31
  • 進攻是最好的防守
    •

    Open resources

    LFI – noteworthy locations

    Linux general

    • /etc/passwd
    • /etc/shadow

    Servers: Nginx/Apache

    • /var/log/nginx/access.log
    • /var/log/nginx/error.log
    • /var/log/apache2/access.log
    • /var/log/apache2/error.log
    • /var/log/apache/access.log
    • /var/log/apache/error.log
    • /var/log/httpd/error_log
    • /usr/local/apache/log/error_log
    • /usr/local/apache2/log/error_log
    • /etc/nginx/nginx.conf
    • /etc/httpd/conf/httpd.conf

    NodeJs

    • /var/www/(main/app/index).js

    關於作者

    Nelley，乃力。
    就是一個村民。