某师范大学新闻传媒系统命令执行到内网渗透

漏洞地址：http://xxxx.xxxx.com

返回DNSLOG

成功反弹shell    root权限

MSF上线

扫描端口

[+] 172.18.27.206:        - 172.18.27.206:22 - TCP OPEN

[+] 172.18.27.206:        - 172.18.27.206:8002 - TCP OPEN

[+] 172.18.27.206:        - 172.18.27.206:8001 - TCP OPEN

[+] 172.18.27.206:        - 172.18.27.206:8060 - TCP OPEN

[+] 172.18.27.206:        - 172.18.27.206:8088 - TCP OPEN

[+] 172.18.27.206:        - 172.18.27.206:8090 - TCP OPEN

[+] 172.18.27.206:        - 172.18.27.206:8888 - TCP OPEN