{"id":1110,"date":"2021-05-19T23:35:30","date_gmt":"2021-05-19T23:35:30","guid":{"rendered":"http:\/\/144.76.171.171\/blog\/?p=1110"},"modified":"2023-08-06T12:32:58","modified_gmt":"2023-08-06T12:32:58","slug":"zafiyetli-makine-serisi","status":"publish","type":"post","link":"https:\/\/berenkudaygorun.com\/blog\/blog\/2021\/05\/19\/zafiyetli-makine-serisi\/","title":{"rendered":"Zafiyetli Makine Serisi"},"content":{"rendered":"

G\u00dcNCELLEME:<\/strong> OSCP oldu\u011fum i\u00e7in 99'dan itibaren makineler OSCP kamsam\u0131nda olmayabilir.<\/p>\n

OSCP haz\u0131rl\u0131k s\u00fcrecimde \u00e7\u00f6zd\u00fc\u011f\u00fcm makineleri elimden geldi\u011fince yazmaya \u00e7al\u0131\u015faca\u011f\u0131m. Amac\u0131m hem bir kaynak olu\u015fturmak hem de kendimi geli\u015ftirmek. Bu y\u00fczden en basit makineler de burada yer alacak, seneler \u00f6nce \u00e7\u00f6zd\u00fc\u011f\u00fcm makinelerde... B\u00fct\u00fcn makineler'le alakal\u0131 ayn\u0131 zamanda k\u0131sa bir ipucu k\u0131sm\u0131 da ekleyece\u011fim. Bu ipucu alanlar\u0131 normalde a\u00e7\u0131k gelmektedir. Ama isterseniz <\/p>\n


\nG\u00f6ster\/Gizle
\n<\/a><\/div>\n

butonuyla bu bilgileri gizleyebilirsiniz.<\/p>\n

\nZafiyetli Makine Tablosu
\n<\/h2>\n
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
S\u0131ra<\/th>\nMakine Ad\u0131<\/th>\nT\u00fcr<\/th>\nSanalla\u015ft\u0131rma<\/th>\n\u0130pucu<\/th>\nZorluk<\/th>\n\u00c7\u00f6z\u00fcm<\/th>\n<\/tr>\n
1<\/td>\nKioptrix 1<\/a><\/td>\nBoot2Root<\/td>\nVMware<\/td>\nEski servisler \u00fczerinde exploit araman\u0131z gerekecektir.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
2<\/td>\nKioptrix 2<\/a><\/td>\nBoot2Root<\/td>\nVMware<\/td>\n\u00c7ok basit bir sql injection var daha sonras\u0131nda local privilege escalation yapman\u0131z gerekecektir.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
3<\/td>\nKioptrix 3<\/a><\/td>\nBoot2Root<\/td>\nVMware<\/td>\n\u0130nternet sayfalar\u0131nda dosya ve dizin ke\u015ffinin ne kadar \u00f6nemli oldu\u011fu anla\u015f\u0131l\u0131yor. \u00c7ok basit bir sql injection var daha sonras\u0131nda sudoers bilgileriniz s\u0131nanacak.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
4<\/td>\nKioptrix 4<\/a><\/td>\nBoot2Root<\/td>\nVMware<\/td>\nMysql UDF konusunda bilgi sahibi olunmal\u0131. Ayn\u0131 zamanda k\u0131s\u0131tl\u0131 shell'ler nas\u0131l bypass edilir bu konuda bilinmelidir.<\/strong><\/td>\nKolay +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
5<\/td>\nKioptrix 5<\/a><\/td>\nBoot2Root<\/td>\nVMware<\/td>\nKernel exploit yapaca\u011f\u0131z ancak \u00f6ncesinde apache konfig\u00fcrasyon dosyalar\u0131n\u0131 okumay\u0131 iyi bilmeliyiz.<\/strong><\/td>\nKolay +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
6<\/td>\nFRISTILEAKS: 1.3<\/a><\/td>\nBoot2Root - CTF<\/td>\nVirtual Box<\/td>\n\u00c7ok basit d\u00fczeyde file upload zafiyetini bilmeniz gerekir. Genel olarak CTF mant\u0131\u011f\u0131nda bir makina, b\u0131rak\u0131lan notlar iyi okunmal\u0131, basit d\u00fczeyde kod okur yazarl\u0131\u011f\u0131 root olman\u0131za yard\u0131mc\u0131 olacakt\u0131r.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
7<\/td>\nSTAPLER: 1
\n<\/a><\/td>\n		Boot2Root - CTF<\/td>\nVirtual Box<\/td>\nHer \u015fey wordpress zafiyetli pluginler \u00fczerinden ba\u015flayacak ve makine i\u00e7erisine ba\u011flant\u0131 yapt\u0131ktan sonra iyi bir bilgi toplama yap\u0131lmas\u0131 gerekiyor.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
8<\/td>\nVULNOS: 2<\/a><\/td>\nBoot2Root - CTF<\/td>\nVirtual Box<\/td>\nBir version numaras\u0131 g\u00f6rd\u00fc\u011f\u00fcm\u00fczde onunla ilgili exploit aramay\u0131 her zaman d\u00fc\u015f\u00fcnmeliyiz.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
9<\/td>\nSICKOS: 1.2<\/a><\/td>\nBoot2Root - CTF<\/td>\nVMware<\/td>\nPUT metod'unu k\u00f6t\u00fcye kullan\u0131yoruz. Ayr\u0131ca zafiyetli sistemler hakk\u0131nda genel k\u00fclt\u00fcr kazan\u0131yoruz.<\/strong><\/td>\nKolay +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
10<\/td>\nPWNOS: 2.0 (PRE-RELEASE)<\/a><\/td>\nBoot2Root<\/td>\nVMware<\/td>\nMYSQL baz\u0131nda sql injeciton ile basit d\u00fczeyde iyi bir egzersiz olaca\u011f\u0131n\u0131 d\u00fc\u015f\u00fcn\u00fcyorum. Yeni ba\u015flayanlara \u00f6neririm.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
11<\/td>\nSKYTOWER: 1<\/a><\/td>\nCTF<\/td>\nVirtual Box<\/td>\nHTTP Proxy'i g\u00f6rd\u00fc\u011f\u00fcm\u00fcz basit d\u00fczeyde bir makine ayr\u0131ca sqlmap bulmas\u0131na ra\u011fmen false-positive dedi\u011fi bir sqli'\u0131 nas\u0131l ke\u015ffedebilece\u011fimizi g\u00f6steren bir CTF<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
12<\/td>\nMR-ROBOT: 1<\/a><\/td>\nCTF<\/td>\nVirtual Box<\/td>\nBasit bir makine. Flagler \u00fczerinden ilerlememiz gerekmektedir. WordPress i\u00e7in bir ba\u015flang\u0131\u00e7 al\u0131\u015ft\u0131rmas\u0131 olabilir.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
13<\/td>\nPWNLAB: INIT<\/a><\/td>\nCTF<\/td>\nVirtual Box<\/td>\nphp programlama bilgisi istedi\u011fini basit d\u00fczeyde s\u00f6yleyebilirim. Makine basit bir makine sadece dikkatl bir \u015fekilde bilgi toplanmal\u0131d\u0131r. LFI ve Parameter Injection e\u011fitimi i\u00e7in iyi bir makine diyebilirim.<\/strong><\/td>\nKolay +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
14<\/td>\nZICO2: 1<\/a><\/td>\nBoot2Root, CTF<\/td>\nVirtual Box<\/td>\nlfi bulacaks\u0131n\u0131z, default parolalar ve y\u00fcksek haklarda \u00e7al\u0131\u015fabilen binary'lerle yetki y\u00fckseltme...<\/strong><\/td>\nKolay <\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
15<\/td>\nTEMPLE OF DOOM: 1<\/a><\/td>\nBoot2Root, CTF<\/td>\nVirtual Box<\/td>\nserialize zafiyetleri i\u00e7in g\u00fczel bir ba\u015flang\u0131\u00e7 olabilir ve sudoers dosyas\u0131 arac\u0131l\u0131\u011f\u0131 ile yetki y\u00fckseltme var.<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
16<\/td>\nWINTERMUTE: 1 \u2013 Part 1<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nSMTP i\u00e7eren, LFI olan g\u00fczel bir makine<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
17<\/td>\nWINTERMUTE: 1 \u2013 Part 2<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nPivoting arayanlar i\u00e7in g\u00fczel bir makine ayr\u0131ca ssh-keygen tekrar\u0131 yapabilirsiniz.<\/strong><\/td>\nOrta +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
18<\/td>\nWEB DEVELOPER: 1<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nWordPress edit\u00f6r\u00fcn\u00fc kullanamad\u0131\u011f\u0131m\u0131zda zafiyetli plugginleri kullanabiliriz ve sudo ile \u00e7al\u0131\u015fan uygulamalar dikkatli se\u00e7ilmelidir.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
19<\/td>\nDC: 6<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nWordPress plugin ile i\u00e7eri girme ve nmap ile hak y\u00fckseltme.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
20<\/td>\nDC: 9<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nPort knocking var, lfi var ama makineye girdikten sonras\u0131 kod-okur yazarl\u0131\u011f\u0131.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
21<\/td>\nsymfonos: 1<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nsmb ile pratik yapmak \u00e7in g\u00fczel bir makine ayr\u0131ca yetki y\u00fckseltmek i\u00e7in PATH manip\u00fclasyonu yapman\u0131z gerekecek.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
22<\/td>\nsymfonos: 2<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nLocal'de \u00e7al\u0131\u015fan servislerin ne kadar \u00f6nemli oldu\u011funu size g\u00f6sterecektir. Ayn\u0131 zamanda elde etti\u011fimiz kullan\u0131c\u0131lara kabakuvvet yapmaktan \u00e7ekinmemeliyiz.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
23<\/td>\nSYMFONOS: 3.1<\/a><\/td>\nBoot2Root<\/td>\nVirtual Box<\/td>\nT\u0131kand\u0131\u011f\u0131nda wordlist de\u011fi\u015ftir. Enumeration \u00e7ok \u00f6nemli , backround process'ler \u00e7ok \u00f6nemli...<\/strong><\/td>\nZor<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
24<\/td>\nSYMFONOS: 4
\n<\/a><\/td>\n		Boot2Root<\/td>\nVirtual Box<\/td>\nLog poisoing ve muhte\u015fem sad\u0131c\u0131 lfi. Python okur yazarl\u0131\u011f\u0131 ve deserialize hakk\u0131nda bilgi sahibi olmak \u00f6nemli olabilir.<\/strong><\/td>\nOrta+<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
25<\/td>\nBREACH: 1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\nTLS\/SSL konular\u0131nda eksikseniz e\u011fer, benim gibi makineyi yar\u0131da b\u0131rak\u0131p ders \u00e7al\u0131\u015fman\u0131z gerekebilir...<\/strong><\/td>\nOrta+<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
26<\/td>\nALFA: 1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\nPort Forwarding ve dikkat!<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
27<\/td>\ndevguru-1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\nG\u00fcncel hash algoritmalar\u0131 ve git hakk\u0131nda \u00e7ok g\u00fczel bilgiler edineceksin! Birazda kod okur\/yazarl\u0131\u011f\u0131 laz\u0131m. Let's GO!<\/strong><\/td>\nZor<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
28<\/td>\nHEALTHCARE: 1
\n<\/a><\/td>\n		Boot2Root<\/td>\nVirtual Box<\/td>\nPath manip\u00fclasyonu ve dirb taramalar\u0131nda b\u00fcy\u00fck wordlist'lerin \u00f6nemi...<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
29<\/td>\nLORD OF THE ROOT: 1.0.1
\n<\/a><\/td>\n		Boot2Root<\/td>\nVirtual Box<\/td>\nPort knock var gerisi kolay.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
30<\/td>\nPINKY'S PALACE: V1
\n<\/a><\/td>\n		Boot2Root, CTF<\/td>\nVirtual Box<\/td>\nBuffer overflow ve k\u00fc\u00e7\u00fck oyunlar<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
31<\/td>\nINFOSEC PREP: OSCP
\n<\/a><\/td>\n		Boot2Root, CTF<\/td>\nVirtual Box<\/td>\nBase64 ve SUID<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
32<\/td>\nBOB: 1.0.1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\ngpg ve sa\u00e7ma CTF i\u015fleri<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
33<\/td>\nDJINN: 1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\npython2 input zafiyeti<\/strong><\/td>\nOrta+<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
34<\/td>\nVENOM: 1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\nSUDO ile komut \u00e7al\u0131\u015ft\u0131rabilece\u011fimiz ara\u00e7lar bilmeniz yeterli.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
35<\/td>\nTIKI: 1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\nExploit aramay\u0131 bilsen yeterli.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
36<\/td>\nNODE: 1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\nnode js okur yazarl\u0131\u011f\u0131i, mongo db bilgisi, binary okuma...<\/strong><\/td>\nZor<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
37<\/td>\nELECTION: 1
\n<\/a><\/td>\n		CTF<\/td>\nVirtual Box<\/td>\nNormal bir CTF<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
38<\/td>\nHACKME: 1
\n<\/a><\/td>\n		CTF<\/td>\nVmware<\/td>\nA\u015f\u0131r\u0131 kolay<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
39<\/td>\nSAR: 1
\n<\/a><\/td>\n		CTF<\/td>\nVmware<\/td>\ncron<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
40<\/td>\nW1R3S: 1.0.1<\/a><\/td>\nCTF<\/td>\nVmware<\/td>\nsudo grubuna ekli bir kullan\u0131c\u0131<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
41<\/td>\nMISDIRECTION: 1<\/a><\/td>\nCTF<\/td>\nVmware<\/td>\nfind arac\u0131n\u0131 iyi kullanmal\u0131y\u0131z ve linux kullan\u0131c\u0131 ekleme<\/strong><\/td>\nKolay +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
42<\/td>\nPHOTOGRAPHER: 1<\/a><\/td>\nCTF<\/td>\nVmware<\/td>\nexploit-db ve suid<\/strong><\/td>\nKolay +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
43<\/td>\nSOLIDSTATE: 1<\/a><\/td>\nCTF<\/td>\nVmware<\/td>\nfind arac\u0131n\u0131 iyi kullanabilmeliyiz ve restirected shell bypass<\/strong><\/td>\nKolay +<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
44<\/td>\nEVM: 1<\/a><\/td>\nCTF<\/td>\nVirtual Box<\/td>\ngizli dosyalara dikkat<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
45<\/td>\nOpenAdmin<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nexploit search ve local portlar<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
46<\/td>\nForest<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nAS-REP Roast ve Haklar\u0131 k\u00f6t\u00fcye kullanma<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
47<\/td>\nBastion<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nvhd ve sab\u0131r<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
48<\/td>\nActive<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\ngroup policy ve spn<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
49<\/td>\nLegacy<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nMS08-067<\/strong><\/td>\nKolay<\/td>\nGerek yok<\/a><\/td>\n<\/tr>\n
50<\/td>\nDevel<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nFTP Anonymous ve Local Exploit Suggester<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
51<\/td>\nBlue<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nMS17-010<\/strong><\/td>\nKolay<\/td>\nGerek yok<\/a><\/td>\n<\/tr>\n
52<\/td>\nOptimum<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nMS16-098<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
53<\/td>\nBastard<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nDrupal 7.x - MS11-011 <\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
54<\/td>\nLame<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nCVE-2004-2687,distccd,nmap <\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
55<\/td>\nBlocky<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nreverse engineering <\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
56<\/td>\nGranny<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nhttp put ve move tehlikelidir.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
57<\/td>\nArctic<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nMS10-059<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
58<\/td>\nGrandpa<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nIIS6<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
59<\/td>\nSilo<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nOracle TNS listener<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
60<\/td>\nBounty<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nweb.config ve whoami\/ priv<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
61<\/td>\nShocker<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nshellshock<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
62<\/td>\nBashed<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nKolay makina<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
63<\/td>\nJerry<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nTomcat, Default<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
64<\/td>\nOmni<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nWindows IOT<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
65<\/td>\nWorker<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nAzur, devops<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
66<\/td>\nValentine<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nHeartbleed ve tmux sessionlar\u0131<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
67<\/td>\nPoison<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nLog Poison ve VNC<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
68<\/td>\nIrked<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nIRC<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
69<\/td>\nMagic<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nFile Upload<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
70<\/td>\nPostman<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nredis, webmin<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
71<\/td>\nDoctor<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nServer Side Template Injection, Splunk<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
72<\/td>\nJarvis<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nSUID, BASH<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
73<\/td>\nSwagShop<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nExploit bul, oku, d\u00fczenle<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
74<\/td>\nNineveh<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nBiraz sab\u0131r ve processler<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
75<\/td>\nCronos<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\ndns zone transfer, sqli<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
76<\/td>\nFriendzone<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\ndns zone transfer, lfi<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
77<\/td>\nHaircut<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nB\u00fcy\u00fck wordlistler, Injection ve SUID<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
78<\/td>\nFrolic<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\n\u015eifrelemeler ve Buffer Overflow<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
79<\/td>\nBlunder<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nCTF Mant\u0131\u011f\u0131nda, notlar\u0131 iyi oku<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
80<\/td>\nTraceback<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nlua ve kolay priv<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
81<\/td>\nHelp<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nbasit d\u00fc\u015f\u00fcn<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
82<\/td>\nSuana<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nASPREPROAST, DCSYNC<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
83<\/td>\nBlackfield<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nASPREPROAST, SeBackupPrivilege<\/strong><\/td>\nZor<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
84<\/td>\nCap<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nEnumeration ve capabilities<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
85<\/td>\nCurling<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nEnumeration ve arkapladaki s\u00fcre\u00e7ler<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
86<\/td>\nWriteup<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nKod yazmay\u0131 bileceksin ya da sab\u0131rl\u0131 olacaks\u0131n, PATH'e dikkat.<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
87<\/td>\nRemote<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nuniq, find gibi ara\u00e7lar\u0131 kullanmay\u0131 bilmek iyi olabilir, unquoted path attack.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
88<\/td>\nHeist<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nBiraz cisco bilmeniz gerekebilir ya da iyi ara\u015ft\u0131racaks\u0131n\u0131z ayn\u0131 zamanda process dump.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
89<\/td>\nNibbles<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nWAF Bypass<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
90<\/td>\nBeep<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nKolay hocam<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
91<\/td>\nSense<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nKolay hocam<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
92<\/td>\nSecNotes<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nCSRF<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
93<\/td>\nSunday<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nFinger<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
94<\/td>\nMeta<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nsubdomain<\/strong><\/td>\nOrta<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
95<\/td>\nReturn<\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\n\u00c7\u00f6zeli \u00e7ok oldu hat\u0131rlam\u0131yorum<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
96<\/td>\nDelivery <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\n\u00c7\u00f6zeli \u00e7ok oldu hat\u0131rlam\u0131yorum<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
97<\/td>\nLove <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\n\u00c7\u00f6zeli \u00e7ok oldu hat\u0131rlam\u0131yorum<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
98<\/td>\nBountyHunter <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nXXE exploit<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
99<\/td>\nPhotobomb <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nPATH Hikjacking, OS Command Injection<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
100<\/td>\nPrevise <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nPATH Hikjacking, OS Command Injection, HTTP Redirect Vuln.<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
101<\/td>\nAcademy <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nCVE, Laravel<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
102<\/td>\nStocker <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nSubdomain, nosql<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
103<\/td>\nInject <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nSpring Framework, LFI, Arkaplan \u0130\u015elemler<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n
104<\/td>\nTwoMillion <\/a><\/td>\nBoot2Root<\/td>\nHack The Box<\/td>\nAPI test<\/strong><\/td>\nKolay<\/td>\n\u00c7\u00f6z\u00fcm<\/a><\/td>\n<\/tr>\n<\/table>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

G\u00dcNCELLEME: OSCP oldu\u011fum i\u00e7in 99’dan itibaren makineler OSCP kamsam\u0131nda olmayabilir. OSCP haz\u0131rl\u0131k s\u00fcrecimde \u00e7\u00f6zd\u00fc\u011f\u00fcm makineleri elimden geldi\u011fince yazmaya \u00e7al\u0131\u015faca\u011f\u0131m. Amac\u0131m hem bir kaynak olu\u015fturmak hem…<\/p>\n

Devam\u0131n\u0131 okuZafiyetli Makine Serisi<\/span><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[498],"tags":[],"class_list":["post-1110","post","type-post","status-publish","format-standard","hentry","category-walkthrough","entry"],"_links":{"self":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1110","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/comments?post=1110"}],"version-history":[{"count":135,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1110\/revisions"}],"predecessor-version":[{"id":2176,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1110\/revisions\/2176"}],"wp:attachment":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/media?parent=1110"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/categories?post=1110"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/tags?post=1110"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}