在目标靶机上信息搜集 www-data@academy:/home$cat/var/www/html/academy/.envAPP_NAME=Laravel APP_ENV=local APP_KEY=base64:dBLUaMuZz7Iq06XtL/Xnz/90Ejq+DEEynggqubHWFj0=APP_DEBUG=falseAPP_URL=http://localhostLOG_CHANNEL=stack DB_CONNECTION=mysql DB_HOST=127.0.0.1DB_PORT=3306DB_DATABASE=ac...
Looking at the response seems that the portal on the port80, answer to the addresshttp://academy.htb/, so insert the domain "academy.htb" on your host file (/etc/hosts). And navigating theURL... Nice, seems thatHTBsponsors itself! Well, nothing particular here, only the links to the...