franlrs/writeups

GitHub: franlrs/writeups

该仓库是一位网络安全爱好者记录的 CTF 靶机与渗透测试实验室完整解题过程合集，涵盖从侦察到提权的全链路实操笔记。

Stars: 1 | Forks: 0

🔐 渗透测试与 CTF Writeup 合集

从侦察到 root —— 一步步记录。

## 📖 关于本仓库 Hello World! 我是 **franlrs** —— 一名网络安全爱好者，正在记录我通过 CTF 靶机和渗透测试实验室的实操之旅。每篇 writeup 都涵盖了**完整的利用链**：侦察 → 枚举 → 利用 → 权限提升，并对使用的每种技术和工具进行了详细说明。所有 writeup 也会发布在我的个人网站上，以获得更好的阅读体验 —— 请访问 **[portfolio.franlrs.blog](https://portfolio.franlrs.blog/writeups)** 查看。 ## 🐳 DockerLabs | # | 靶机 | 难度 | 关键技术 | Writeup | |---|---------|-----------|----------------|---------| | 01 | 🩸 **BigWear** | ![Intermediate](https://img.shields.io/badge/Intermediate-orange?style=flat-square) | CVE-2025-34077 · Auth Bypass · RCE · PrivEsc | [![Read](https://img.shields.io/badge/Read-→-blueviolet?style=flat-square)](https://portfolio.franlrs.blog/writeups/dockerlabs/bigwear) | | 02 | 💼 **BigWork** | ![Intermediate](https://img.shields.io/badge/Intermediate-orange?style=flat-square) | — | [![Read](https://img.shields.io/badge/Read-→-blueviolet?style=flat-square)](https://portfolio.franlrs.blog/writeups/dockerlabs/bigwork) | | 03 | 🏜️ **Duque** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | — | [![Read](https://img.shields.io/badge/Read-→-blueviolet?style=flat-square)](https://portfolio.franlrs.blog/writeups/dockerlabs/duque) | | 04 | 🌳 **Tproot** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | — | [![Read](https://img.shields.io/badge/Read-→-blueviolet?style=flat-square)](https://portfolio.franlrs.blog/writeups/dockerlabs/tproot) | | 05 | 🎒 **Trailpack** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | — | [![Read](https://img.shields.io/badge/Read-→-blueviolet?style=flat-square)](https://portfolio.franlrs.blog/writeups/dockerlabs/trailpack) | ## 📦 Hack The Box | # | 靶机 | 难度 | 关键技术 | Writeup | |---|---------|-----------|----------------|---------| | 01 | 📅 **Appointment** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | SQL Injection | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/appointment) | | 02 | 🐊 **Crocodile** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | FTP Anon · Directory Brute | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/crocodile) | | 03 | 💃 **Dancing** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | SMB Enumeration | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/dancing) | | 04 | 🦌 **Fawn** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | FTP Anonymous Login | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/fawn) | | 05 | 🐱 **Meow** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | Telnet · Default Credentials | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/meow) | | 06 | ☠️ **Redeemer** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | Redis Enumeration | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/redeemer) | | 07 | 📡 **Responder** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | LLMNR Poisoning · Hash Crack | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/responder) | | 08 | 🗃️ **Sequel** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | MariaDB · SQL Enum | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/sequel) | | 09 | 3️⃣ **Three** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | AWS S3 · Subdomain Enum | [![Read](https://img.shields.io/badge/Read-→-9fef00?style=flat-square&labelColor=1a2332)](https://portfolio.franlrs.blog/writeups/hackthebox/three) | ## 🔴 TryHackMe | # | 靶机 | 难度 | 关键技术 | Writeup | |---|---------|-----------|----------------|---------| | 01 | 🏘️ **Neighbour** | ![Easy](https://img.shields.io/badge/Easy-brightgreen?style=flat-square) | IDOR · Access Control | [![Read](https://img.shields.io/badge/Read-→-red?style=flat-square)](https://portfolio.franlrs.blog/writeups/tryhackme/neighbour) | ## 🛠️ 工具与方法论

| 类别 | 工具 | |----------|-------| | 🔍 **侦察** | `nmap` `masscan` `whois` `dig` | | 🗺️ **枚举** | `gobuster` `ffuf` `wpscan` `nikto` `enum4linux` | | 💣 **利用** | `metasploit` `burpsuite` `sqlmap` `hydra` | | 🐚 **Shells** | `netcat` `socat` `revshells.com` | | 📈 **权限提升** | `linpeas` `pspy` `gtfobins` `sudo -l` | | 🔑 **破解** | `john` `hashcat` `rockyou.txt` |

## 📊 统计

| 平台 | 靶机数 | Easy | Medium | Hard | |----------|----------|------|--------|------| | 🐳 DockerLabs | 5 | 3 | 2 | 0 | | 📦 Hack The Box | 9 | 9 | 0 | 0 | | 🔴 TryHackMe | 1 | 1 | 0 | 0 | | **总计** | **15** | **13** | **2** | **0** |

## 🔗 链接

[![Portfolio & Writeups](https://img.shields.io/badge/🌐_Portfolio_&_Writeups-portfolio.franlrs.blog-blueviolet?style=for-the-badge)](https://portfolio.franlrs.blog/writeups)

_{📄 MIT License · 如果有用请点个 Star！}

标签：CTI, Web报告查看器, 协议分析, 后端开发, 密码管理, 权限提升, 漏洞分析, 网络安全, 路径探测, 隐私保护