简介：

Some boxes sting...

房间链接：

https://tryhackme.com/room/yearofthejellyfish

问题：

挑战开始：

先扫描端口

nmap -p 1-65535 -sC -sV 18.203.98.204

└─# nmap -p 1-65535 -sC -sV 18.203.98.204
Starting Nmap 7.93 ( https://nmap.org ) at 2022-12-20 06:17 UTC
Not shown: 65528 filtered tcp ports (no-response)
PORT      STATE SERVICE  VERSION
21/tcp    open  ftp      vsftpd 3.0.3
22/tcp    open  ssh      OpenSSH 5.9p1 Debian 5ubuntu1.4 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
|_  2048 46b281bee0bca7863939825bbfe56558 (RSA)
80/tcp    open  http     Apache httpd 2.4.29
|_http-title: Did not follow redirect to https://robyns-petshop.thm/
|_http-server-header: Apache/2.4.29 (Ubuntu)
443/tcp   open  ssl/http Apache httpd 2.4.29 ((Ubuntu))
|_http-title: Robyn's Pet Shop
| ssl-cert: Subject: commonName=robyns-petshop.thm/organizationName=Robyns Petshop/stateOrProvinceName=South West/countryName=GB
| Subject Alternative Name: DNS:robyns-petshop.thm, DNS:monitorr.robyns-petshop.thm, DNS:beta.robyns-petshop.thm, DNS:dev.robyns-petshop.thm
| Not valid before: 2022-12-20T06:10:56
|_Not valid after:  2023-12-20T06:10:56
|_http-server-header: Apache/2.4.29 (Ubuntu)
|_ssl-date: TLS randomness does not represent time
| tls-alpn:
|_  http/1.1
8000/tcp  open  http-alt
|_http-title: Under Development!
| fingerprint-strings:
|   GenericLines:
|     HTTP/1.1 400 Bad Request
|     Content-Length: 15
|_    Request
8096/tcp  open  unknown
| fingerprint-strings:
|   FourOhFourRequest:
|     HTTP/1.1 404 Not Found
|     Connection: close
|     Date: Tue, 20 Dec 2022 06:20:08 GMT
|     Server: Kestrel
|     Content-Length: 0
|     X-Response-Time-ms: 596
|   GenericLines:
|     HTTP/1.1 400 Bad Request
|     Connection: close
|     Date: Tue, 20 Dec 2022 06:19:42 GMT
|     Server: Kestrel
|     Content-Length: 0
|   GetRequest, HTTPOptions:
|     HTTP/1.1 302 Found
|     Connection: close
|     Date: Tue, 20 Dec 2022 06:19:42 GMT
|     Server: Kestrel
|     Content-Length: 0
|     Location: /web/index.html
|   Help, Kerberos, SSLSessionReq, TLSSessionReq, TerminalServerCookie:
|     HTTP/1.1 400 Bad Request
|     Connection: close
|     Date: Tue, 20 Dec 2022 06:19:57 GMT
|     Server: Kestrel
|     Content-Length: 0
|   LPDString:
|     HTTP/1.1 400 Bad Request
|     Connection: close
|     Date: Tue, 20 Dec 2022 06:20:08 GMT
|     Server: Kestrel
|     Content-Length: 0
|   RTSPRequest:
|     HTTP/1.1 505 HTTP Version Not Supported
|     Connection: close
|     Date: Tue, 20 Dec 2022 06:19:42 GMT
|     Server: Kestrel
|_    Content-Length: 0
22222/tcp open  ssh      OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
|   2048 8d9992528e73ed9101d3a7a08737f04f (RSA)
|   256 5ac0cca1a879ebfd6fcff8780d2f5ddb (ECDSA)
|_  256 0acab8394ecae3cf865c88b92e257a1b (ED25519)

这里最奇怪的是有两个端口开启了ssh服务
这里先需要把ip和域名加入到hosts里面