CTF之Kioptrix Level 1.1 靶机渗透（万能密码 命令注入）

---

练习环境

    攻击机：kali
    靶机：Kioptrix: Level 1.1
下载地址：https://download.vulnhub.com/kioptrix/Kioptrix_Level_2-update.rar

1.发现靶机，端口扫描

root@kali:~# netdiscover -r 192.168.43.0/16
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.43.152  88:b1:11:be:a2:6c      3     180  Intel                    
 192.168.43.47   00:0c:29:53:19:4c      1      60  VMware, Inc.                         
 192.168.43.1    ec:f3:42:fe:09:1d      1      60  GUANGDONG
root@kali:~# nmap -sV -O 192.168.43.47
...
PORT     STATE SERVICE    VERSION
22/tcp