Offensive Security Certified Expert Exam Report

约 603 字大约 2 分钟

While performing penetration tests, I discovered several alarming vulnerabilities on Offensive Security's network. These vulnerabilities were successfully exploited and allowed me to gain access to the system. A brief explanation is as follows:

192.168.xx.xx (hostname) - Name of initial exploit
192.168.xx.xx（主机名）-初始漏洞的名称
192.168.xx.xx (hostname) - Name of initial exploit
192.168.xx.xx（主机名）—初始漏洞的名称

Recommendations

recommend patching the vulnerabilities identified during the testing to ensure that an attacker cannot exploit these systems in the future. One thing to remember is that these systems require frequent patching and once patched, should remain on a regular patch program to protect additional vulnerabilities that are discovered at a later date.

Information Gathering

信息收集

The information gathering portion of a penetration test focuses on identifying the scope of the penetration test. During this penetration test, I was tasked with exploiting the exam network. The specific IP addresses were:

渗透测试的信息收集部分侧重于确定渗透测试的范围。在这次渗透测试中，我的任务是利用考试网络。具体的IP地址为：

Exam Network(考试网)