Analysis of the 2023 "Network Security" Competition Items in Huai'an City, Jiangsu Province (Super Detailed)

①.2023 Secondary Vocational Group Huai'an City, Jiangsu Province Mission Statement

Task 1: Acquisition of server internal information
Task environment description:
Server scenario: Server210510 (close link)
Server scenario operating system: Linux
User name: test Password: 123456
1. Collect service information in the server scenario. And obtain the open port number information in the server, and submit the server port number as a flag (if there are multiple ports separated by ;, such as 11;22;33); 2. Download the dictionary under the
tmp folder in the server to the local, And submit the last username in the dictionary as a flag;
3. The application tool obtains the password of the hacker account in the server. And submit the hacker's password as a flag;
4. Check the sudo software version in the server, and submit the sudo version number as a flag;
5. Log in the malicious user in the server, and check the first command entered by the malicious user in the server , submit the command as a flag;
6. View user information in the server, and submit the last user’s username as a flag;

Task 2: Website penetration test
Task environment description:
Server scenario: Server2100 (close link