[第五空间 2021]WebFTP

[第五空间 2021]WebFTP

May 9, 2025

使用 dirsearch 扫描,发现 /phpinfo.php

┌──(hailo㉿kali-Hailo)-[~]
└─$ dirsearch -u 'http://node4.anna.nssctf.cn:28342/?m=login&a=in'                          
/usr/lib/python3/dist-packages/dirsearch/dirsearch.py:23: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html
  from pkg_resources import DistributionNotFound, VersionConflict

  _|. _ _  _  _  _ _|_    v0.4.3                                                                             
 (_||| _) (/_(_|| (_| )                                                                                      
                                                                                                             
Extensions: php, aspx, jsp, html, js | HTTP method: GET | Threads: 25 | Wordlist size: 11460

Output File: /home/hailo/reports/http_node4.anna.nssctf.cn_28342/__25-05-02_10-32-14.txt

Target: http://node4.anna.nssctf.cn:28342/

[10:32:14] Starting:                                                                                         
[10:32:21] 301 -  335B  - /.git  ->  http://node4.anna.nssctf.cn:28342/.git/
[10:32:21] 200 -  415B  - /.git/branches/                                   
[10:32:21] 200 -  306B  - /.git/config                                      
[10:32:21] 200 -  623B  - /.git/
[10:32:21] 200 -   73B  - /.git/description
[10:32:21] 200 -   23B  - /.git/HEAD
[10:32:21] 200 -  658B  - /.git/hooks/                                      
[10:32:21] 200 -  464B  - /.git/info/                                       
[10:32:21] 200 -  240B  - /.git/info/exclude                                
[10:32:21] 200 -  173B  - /.git/logs/HEAD                                   
[10:32:21] 301 -  345B  - /.git/logs/refs  ->  http://node4.anna.nssctf.cn:28342/.git/logs/refs/
[10:32:21] 301 -  351B  - /.git/logs/refs/heads  ->  http://node4.anna.nssctf.cn:28342/.git/logs/refs/heads/
[10:32:21] 200 -  488B  - /.git/logs/
[10:32:21] 200 -  173B  - /.git/logs/refs/heads/master
[10:32:21] 200 -  173B  - /.git/logs/refs/remotes/origin/HEAD
[10:32:21] 200 -  566B  - /.git/objects/
[10:32:21] 301 -  353B  - /.git/logs/refs/remotes  ->  http://node4.anna.nssctf.cn:28342/.git/logs/refs/remotes/
[10:32:21] 301 -  360B  - /.git/logs/refs/remotes/origin  ->  http://node4.anna.nssctf.cn:28342/.git/logs/refs/remotes/origin/
[10:32:21] 200 -   41B  - /.git/refs/heads/master
[10:32:21] 200 -  114B  - /.git/packed-refs
[10:32:21] 200 -  481B  - /.git/refs/
[10:32:21] 200 -   33KB - /.git/index
[10:32:21] 301 -  346B  - /.git/refs/heads  ->  http://node4.anna.nssctf.cn:28342/.git/refs/heads/
[10:32:21] 301 -  348B  - /.git/refs/remotes  ->  http://node4.anna.nssctf.cn:28342/.git/refs/remotes/
[10:32:21] 301 -  355B  - /.git/refs/remotes/origin  ->  http://node4.anna.nssctf.cn:28342/.git/refs/remotes/origin/
[10:32:21] 200 -   32B  - /.git/refs/remotes/origin/HEAD
[10:32:21] 301 -  345B  - /.git/refs/tags  ->  http://node4.anna.nssctf.cn:28342/.git/refs/tags/
[10:32:21] 403 -  301B  - /.ht_wsr.txt                                      
[10:32:21] 403 -  304B  - /.htaccess.bak1                                   
[10:32:21] 403 -  304B  - /.htaccess.orig
[10:32:21] 403 -  306B  - /.htaccess.sample                                 
[10:32:21] 403 -  304B  - /.htaccess.save
[10:32:21] 403 -  302B  - /.htaccess_sc                                     
[10:32:21] 403 -  304B  - /.htaccess_orig
[10:32:21] 403 -  303B  - /.htaccessOLD2
[10:32:21] 403 -  305B  - /.htaccess_extra
[10:32:21] 403 -  302B  - /.htaccessOLD                                     
[10:32:21] 403 -  302B  - /.htaccessBAK                                     
[10:32:21] 403 -  294B  - /.htm                                             
[10:32:21] 403 -  295B  - /.html                                            
[10:32:21] 403 -  300B  - /.htpasswds                                       
[10:32:21] 403 -  304B  - /.htpasswd_test
[10:32:21] 403 -  301B  - /.httr-oauth                                      
[10:32:22] 403 -  295B  - /.php3                                            
[10:32:22] 403 -  294B  - /.php                                             
[10:32:32] 403 -  298B  - /cgi-bin/                                         
[10:32:32] 403 -  306B  - /cgi-bin/awstats/                                 
[10:32:32] 403 -  316B  - /cgi-bin/a1stats/a1disp.cgi
[10:32:32] 403 -  308B  - /cgi-bin/awstats.pl
[10:32:32] 403 -  309B  - /cgi-bin/htimage.exe?2,2
[10:32:32] 403 -  308B  - /cgi-bin/htmlscript
[10:32:32] 403 -  308B  - /cgi-bin/index.html
[10:32:32] 403 -  310B  - /cgi-bin/imagemap.exe?2,2
[10:32:32] 403 -  303B  - /cgi-bin/login                                    
[10:32:32] 403 -  307B  - /cgi-bin/login.php
[10:32:32] 403 -  315B  - /cgi-bin/mt7/mt-xmlrpc.cgi
[10:32:32] 403 -  307B  - /cgi-bin/mt/mt.cgi
[10:32:32] 403 -  307B  - /cgi-bin/login.cgi
[10:32:32] 403 -  311B  - /cgi-bin/mt-xmlrpc.cgi
[10:32:32] 403 -  308B  - /cgi-bin/mt7/mt.cgi
[10:32:32] 403 -  305B  - /cgi-bin/php.ini
[10:32:32] 403 -  306B  - /cgi-bin/printenv
[10:32:32] 403 -  309B  - /cgi-bin/ViewLog.asp
[10:32:32] 403 -  304B  - /cgi-bin/mt.cgi
[10:32:32] 403 -  309B  - /cgi-bin/printenv.pl
[10:32:32] 403 -  306B  - /cgi-bin/test-cgi
[10:32:32] 403 -  306B  - /cgi-bin/test.cgi
[10:32:32] 403 -  314B  - /cgi-bin/mt/mt-xmlrpc.cgi                         
[10:32:40] 200 -   10KB - /LICENSE                                          
[10:32:41] 200 -   14KB - /logo                                             
[10:32:44] 200 -   18KB - /phpinfo.php                                      
[10:32:46] 200 -    3KB - /README.md                                        
[10:32:46] 301 -  337B  - /Readme  ->  http://node4.anna.nssctf.cn:28342/Readme/
[10:32:47] 403 -  303B  - /server-status                                    
[10:32:47] 403 -  304B  - /server-status/                                   
[10:32:52] 200 -   33KB - /upload                                           
                                                                             
Task Completed

发现 flagNSSCTF{ffb4dc5b-e235-4bb6-b4e2-9db5036124cb}

PixPin_2025-05-02_10-32-41