roaris
commented
3 months ago ポート80にアクセスすると、https:\//10.10.10.7にリダイレクトされて、この画面になる
ポート10000にアクセスしても、この画面になって、httpsのリンク踏むと、上と同じ画面
$ curl https://10.10.10.7 -v
* Trying 10.10.10.7:443...
* Connected to 10.10.10.7 (10.10.10.7) port 443
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/ssl/certs/ca-certificates.crt
* CApath: /etc/ssl/certs
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.0 (IN), TLS handshake, Certificate (11):
* TLSv1.0 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: self-signed certificate
* Closing connection
curl: (60) SSL certificate problem: self-signed certificate
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.$ curl https://10.10.10.7:10000 -v
* Trying 10.10.10.7:10000...
* Connected to 10.10.10.7 (10.10.10.7) port 10000
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/ssl/certs/ca-certificates.crt
* CApath: /etc/ssl/certs
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.0 (IN), TLS handshake, Certificate (11):
* TLSv1.0 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: self-signed certificate
* Closing connection
curl: (60) SSL certificate problem: self-signed certificate
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.自己署名証明書でも、Chromeでは警告が出るだけでアクセス出来るなんだけどなあ ERR_SSL_VERSION_OR_CIPHER_MISMATCH って出てくるのも変だし nmapの結果見ると、ポート443のところに
http-title: Elastix - Login pageとかあるけど
https://app.hackthebox.com/machines/Beep