Hack The Box-Starting Point系列Oopsie

一. 答案

1. With what kind of tool can intercept web traffic? (什么样的工具可以拦截Web流量？)
   proxy
2. What is the path to the directory on the webserver that returns a login page?（Web服务器上返回登录页面的目录路径是什么？）
   /cdn-cgi/login
3. What can be modified in Firefox to get access to the upload page?（我们可以在火狐浏览器中修改什么以访问上传页面）
   cookie
4. What is the access ID of the admin user?（管理员用户的访问ID是什么？）
   34322
5. On uploading a file, what directory does that file appear in on the server?（上传文件时，该文件出现在服务器的哪个目录中？）
   /uploads
6. What is the file that contains the password that is shared with the robert user?（哪个文件包含了robert这个用户的密码）
   db.php
7. What executible is run with the option “-group bugtracker” to identify all files owned by the bugtracker group?(使用选项"-group bugtracker "运行什么可执行文件，以识别 bugtracker 组拥有的所有文件？)
   find
8. Regardless of which user starts running the bugtracker executable, what’s user privileges will use to run?
   root
9. What SUID stands for?
   Set owner User ID
10. What is the name of the executable being called in an insecure manner? （以不安全方式调用的可执行文件的名称是什么？）
    cat

二.f**k步骤

11. 上Nmap扫描，执行命令： nmap -sV -sC 目标IP， 发现有问题
    

<