┌──(root㉿kali)-[~/Desktop/tmp/tmp] └─# rustscan -a 192.168.31.177 -r 1-65535 .----. .-. .-. .----..---. .----. .---. .--. .-. .-. | {} }| { } |{ {__ {_ _}{ {__ / ___} / {} \ | `| | | .-. \| {_} |.-._} } | | .-._} }\ }/ /\ \| |\ | `-' `-'`-----'`----' `-' `----' `---' `-' `-'`-' `-' The Modern Day Port Scanner. ________________________________________ : http://discord.skerritt.blog : : https://github.com/RustScan/RustScan : -------------------------------------- TCP handshake? More like a friendly high-five!
[~] The config file is expected to be at "/root/.rustscan.toml" [~] File limit higher than batch size. Can increase speed by increasing batch size '-b 65435'. Open 192.168.31.177:80 [~] Starting Script(s) [~] Starting Nmap 7.95 ( https://nmap.org ) at 2025-05-07 01:31 EDT Initiating ARP Ping Scan at 01:31 Scanning 192.168.31.177 [1 port] Completed ARP Ping Scan at 01:31, 0.04s elapsed (1 total hosts) Initiating Parallel DNS resolution of 1 host. at 01:31 Completed Parallel DNS resolution of 1 host. at 01:31, 0.04s elapsed DNS resolution of 1 IPs took 0.04s. Mode: Async [#: 2, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0] Initiating SYN Stealth Scan at 01:31 Scanning 192.168.31.177 [1 port] Discovered open port 80/tcp on 192.168.31.177 Completed SYN Stealth Scan at 01:31, 0.02s elapsed (1 total ports) Nmap scan report for 192.168.31.177 Host is up, received arp-response (0.00042s latency). Scanned at 2025-05-07 01:31:14 EDT for 0s
PORT STATE SERVICE REASON 80/tcp open http syn-ack ttl 64 MAC Address: 08:00:27:FE:58:C8 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Read data files from: /usr/share/nmap Nmap done: 1 IP address (1 host up) scanned in 0.20 seconds Raw packets sent: 2 (72B) | Rcvd: 2 (72B)
melisa@five:~$ sudo -l Matching Defaults entries for melisa on five: env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin
User melisa may run the following commands on five: (ALL) SETENV: NOPASSWD: /bin/pwd, /bin/arch, /bin/man, /bin/id, /bin/rm, /bin/clear
可以以root用户运行man
1 2
sudo man man !/bin/sh
这个不行，原因是因为分页用的是pager
1 2 3 4 5 6 7 8 9 10
Controlling formatted output -P pager, --pager=pager Specify which output pager to use. By default, man uses pager, falling back to cat if pager is not found or is not executable. This option overrides the $MANPAGER environment variable, which in turn overrides the $PAGER environment variable. It is not used in conjunction with -f or -k.
The value may be a simple command name or a command with arguments, and may use shell quoting (back‐ slashes, single quotes, or double quotes). It may not use pipes to connect multiple commands; if you need that, use a wrapper script, which may take the file to display either as an argument or on stan‐ dard input.
