åºæ
æ»æçã§é²åŸ¡çãªããªã«äžã«ãããŒã ã¯æåã«ãŠã§ãã·ã§ã«ãååŸããæ¬¡ã«ã³ãã«ãã¹ãã©ã€ã¯ãžã®èš±å¯ãããŠã³ãããŠãã€ã³ãã©ãããã®æµžéãä¿é²ããŸãã
çŸåšã®ãã·ã³ããããªãã¯ãããã¯ãŒã¯ãµãŒããŒã§ããããšãçºèŠããããšã«ããããããªãã¯ãããã¯ãŒã¯IPïŒxxx.xxx.xxx.16ã®ã¿ã
ARPãã£ãã·ã¥ã衚瀺ããããšã«ãããçŸåšããã€ãã®ãããªãã¯ãããã¯ãŒã¯ãã·ã³ãããããšãããããŸããã
ãããã®IPSãç §äŒããããšã«ãããããã¯ããããã¯ãŒã¯ãã§ããããšãããããNBTSCANãä»ããŠãçŸåšã®Cã»ã°ã¡ã³ãã«ã¯çåãããã¹ããããããšãããããŸãïŒïŒçŸåšã®Cã»ã°ã¡ã³ããã·ã³ã«ã¯ãã¡ã€ã³ããããšå€æãããŸããã確ãã§ã¯ãããŸããïŒ
å éšã€ã³ãã©ããããã·ã³ã®çŸåšã®æåã®å±€ã®Cã»ã°ã¡ã³ããæ°Žå¹³ã«ç§»å
æ»æçã§é²åŸ¡çãªããªã«ã§ããããããã€ã³ããå€ãã»ã©è¯ãã§ããããã§ã¯ä»ã®åé¡ãèæ ®ããŠããŸãããçŸåšã®ãã·ã³ãååŸããåŸãç§ã¯å¹³æãã¹ã¯ãŒãããã£ããããŸããïŒ
ãã ãããã®ãã¹ã¯ãŒãã䜿çšããŠMSFã䜿çšããŠãã¹ã¯ãŒããä»ããŠCã»ã°ã¡ã³ããã¹ãã¬ãŒãããšããã¹ããæ£åžžã«æ°Žå¹³ã«ãªã£ãŠããªãããšãããããŸããã
ãã®ç¬éãç§ã¯åã³ã¹ãã£ã³ããŠMS17010ããããã©ããã確èªããŸããïŒïŒäžè¬çã«èšãã°ããã®çš®ã®ãXiang.comãã«ã¯åºæ¬çã«ããã€ãã®æ°žé ã®éãããã®ã§ãã¹ãã£ã³ããã ãã§ãïŒ
3ã€ã®ãŠããã92ã151ãããã³200ãMS17010ã«ååšããããšãããããŸããããã®åŸããã®ãŠãããã92ãšåŒã³ãŸãã
ãã®åŸãMSFãšCSããªã³ã¯ãããMSFã·ã§ã«ãå床CSã«ãããããèš±å¯ãç¶æããŸããã
çŸæç¹ã§ã¯ãããã2ã€ã®ã¹ããªã³ã°ããŒããã·ã³ã䜿çšããã ãã§ååã§ããä»ã®2ã€ã®MS17010ãšæŠãå¿ èŠã¯ãããŸãããæ¬¡ã«ãçŸåšã®Cã»ã°ã¡ã³ãã«é¢ããæ å ±ãåéããWebã¢ã»ãããã¹ãã£ã³ããŠçãæ®ãã倿°ã®Webã¢ã»ãããèŠã€ããŸããã
æååæã«ãããSQL泚å
¥ãèŠã€ãããŸããããããŠããã¯DBAã®èš±å¯ã§ããïŒ
ãã®åŸã管çè
ãŠãŒã¶ãŒã远å ãããŠãã3389ããªã³ã«ããŸããïŒNortonã®ããã宿çãªç¡æãã«ã®ããã«æéããªãã®ã§ãäž»ã«ãã€ã³ããç²åŸããã®ã§ããµãŒããŒã«çŽæ¥ãã°ã€ã³ããŸããïŒ
ãããŠãç§ã¯éŽäžãéããŠçŽæ¥æ¥ç¶ããããšã¯ã§ããŸãããããã¯å¶éã®ããã«æããããŸããåŸã§ãMSTSC /管çè ã䜿çšããããšã§ãã°ã€ã³ããããšãã§ããããšãããããŸããã
ãã®æç¹ã§ãç§ã¯92ãã®ãã·ã³ãã¹ããªã³ã°ããŒããšããŠäœ¿çšããŠã71ãã¹ã¯ãããã«ãªã¢ãŒãã§ãã°ã€ã³ããŸããã
管çè
ã®ãã¹ã¯ããããã¯ããŒã³åãããŸããã
ãã®æç¹ã§ã以åã«è¿œå ãããã¢ã«ãŠã³ãã«ãã°ã€ã³ããŠããªã¢ãŒããã¹ã¯ãããã«ç§»åããŸãã管çè
ã®ãã¹ã¯ãããã§ãïŒ
äžé£ã®æ
å ±åéãšãã¹ã¯ãŒãã³ã¬ã¯ã·ã§ã³ãéããŠãMSSQLããã³ãã¹ãŠã®ãµã€ãã¹ããŒã·ã§ã³ã®èš±å¯ãååŸããŸããã
åéããããã¹ã¯ãŒããä»ããŠãã»ã°ã¡ã³ãCã®ãã¹ã¯ãŒããæ£åžžã«ã¹ãã¬ãŒãç¶ããŸãã MSSQLïŒxxx.xxx.xxx.239
次ã«ãã³ãã³ããå®è¡ããããã«XP_CMDSHELLã«çŽæ¥é»è©±ããŠãèš±å¯ããŸã éåžžã«å€§ããããšãããããŸããã
次ã«ãbitsadminã䜿çšããŠãªã³ã©ã€ã³ã§CSã«è¡ããŸãã
ãã®æç¹ã§ãããã3ã€ã®ãã·ã³ã®èš±å¯ïŒ16ã92ãããã³239ã¯ååŸãããŸããããã€ã³ãã©ãããã¯ãŸã çºèŠãããŠãããããã®æç¹ã§ããã«ããã¯ã«å·»ã蟌ãŸããŸããã
ãã®ç¹ã«å°éããåŸãç§ã¯æ°Žå¹³ã«ç§»åããããšã¯äžå¯èœã§ããããšãããããŸãããä»ã®ãŠã§ãããããããããã«0æ¥ã䜿çšããããããŸãããç§ã¯æ¯ãåããŠMS17010ã䜿çšããŠ200人ããããããŸããïŒ
ãã®åŸãåæ§ã«ãã·ã§ã«ãCSã«ãããããããŠãŒã¶ãŒã远å ããããªã¢ãŒããã¹ã¯ãããã°ã«ãŒãã远å ãããŸããã
ãã®åŸããã°ã€ã³ã¯ãã°ã€ã³ã倱æããããšãçºèŠããŸããã
ãã®æç¹ã§ãMSTSC/管çè
ã¯ãã€ãã¹ããã¿ãŒã²ãããªã¢ãŒããã¹ã¯ãããã«æ£åžžã«ãã°ã€ã³ã§ããŸãã
管çè ã®ãã¹ã¯ãããã¯åãããã«ã¯ããŒã³åãããŸããã
MSTSCãã°ã€ã³ã¬ã³ãŒããªã©ãå€ãã®è²Žéãªãã®ãèŠã€ããŸããã
NAVICATããŒã¿ããŒã¹è³æ Œæ
å ±ãååŸããŸãã
ãšXshellã«ã¯å€ãã®SSHãããããšãããããŸããã
ãã¹ãŠã®Linuxãã¹ãããã°ã€ã³ã§ããŸãããã®æç¹ã§ãSharpDecryptPWDã䜿çšããŠãã¹ã¯ãŒããååŸããã ãã§ãããåé¡ãèŠã€ãããŸããã
ãã®ããšã䜿çšããŠãã¹ã¯ãŒããåŸã§ç¢ºèªããïŒïŒãããã®ãã®ã䜿çšããããªãã£ãã®ã§ããã¹ã¯ãŒãã1ã€ãã€ãã§ãã¯ããã®ã¯é¢åãããŸãïŒ
10åã®ã€ã³ãã©ããããåãããã·ã³ãããã€ãããããšãããããŸããã
æ¢åã®ãã¹ã¯ãŒãã䜿çšããŠãLinuxãã¹ããã»ã°ã¡ã³ãCã§æ°Žå¹³ã«ã¹ãã¬ãŒããŸãã
ãã®åŸãããã€ãã®ã·ã§ã«ãMSFã«ãããããŸããã
ãããŸã§ã®ãšããããã®ãããªãã¯ãããã¯ãŒã¯ã®Cã»ã°ã¡ã³ãã¯åºæ¬çã«æµžéããŠããã倿°ã®ã³ã¢ããŒã¿ããŒã¹ãã¹ã€ãããããã³WebãµãŒããŒãåé€ãããŠããŸããæ¬¡ã®ã¹ãããã¯ã10åã®ã€ã³ãã©ãããã®ã€ã³ãã©ãããæµžéã§ãã
ã€ã³ãã©ãããã€ã³ãã©ããã10ã»ã°ã¡ã³ãã®2çªç®ã®å±€ããã®ã€ã³ãã©ãããæµžé
ã«ãŒããã¹ã¯ãŒããååŸããããã10.10.10.1/16ã®Bã»ã¯ã·ã§ã³ãçŽæ¥ã¹ãã£ã³ããŸãããè³ç£ã®å€§ããªæ³¢ããããŸããããã§ã¯ã¹ã¯ãªãŒã³ã·ã§ãããæ®ããŸããããããã¯äœçŸããããç§ã¯esxiãããããšãçºèŠããŸããïŒ
ã¢ã¯ã»ã¹å¶åŸ¡ã·ã¹ãã ãååŸããŸããïŒ
ã¯ãç¹å¥ãªææ®µã§æ°Žå¹³ã«10åã®ã»ã°ã¡ã³ãã®2ã€ã®SSHãåããã€ã³ãã©ãããã®3çªç®ã®å±€ã¯192ã®ã»ã°ã¡ã³ããšDockerç°å¢ã§ããããšãããããŸããã
10ã»ã°ã¡ã³ãã«ESXIããããããè匱æ§ãçŽæ¥äœ¿çšããŠESXIã¯ã©ãŠããã©ãããã©ãŒã ãååŸãããã¹ãŠã®ãã·ã³ãéé£ãããŸããã
ãã®æç¹ã§ã10çªç®ã®ã»ã¯ã·ã§ã³ã¯åºæ¬çã«äŸµå
¥ãããŠãããæ¬¡ã®ã¹ãããã¯192ã®ã€ã³ãã©ãããã«æµžéããããšã§ãã
ã€ã³ãã©ãããã»ã°ã¡ã³ãã®3çªç®ã®å±€ããã®ã€ã³ãã©ãããæµžé192
éåžžã®FSCANãä»ããŠ192段èœãã¹ãã£ã³ããã ãã§ã192ã®è³ç£ãéåžžã«èèªã§ããããšãããããŸããã
ãã®åŸãMS17010ã®2ã€ã®è匱æ§ãèŠã€ãããŸããã
ä»ãç§ãã¡ã¯é¢ä¿ãæŽçããŸããããããŠãçŸåšã®ç°å¢ã¯æ¬¡ã®ãšããã§ãã
å ã®ãªã³ã¯ïŒhttps://MP.Weixin.QQ.com/s?__biz=mzkxndewmda4mw==mid=2247491421Idx=1Sn=769D715D057112EB4EE1EBB8312E37KKSM241F6051F6055 83F946625F2689EC6214E9D47A61C6639999D2CD2A62C0DE464CENE=123KEY=F3D 6282F44B990E0F2527AF4DB8E088F25F3E43D0ABAF5F845FF52E14965E4FE188C890