
ããã¯ã€ãããã«ãŒä¿®è¡èš #08ãWindowsã®äžã«ããã«ãŒã®é ãå®¶ããWSL2ÃVPNæ¥ç¶ã§æŽã¿åã£ããç¡éã®æŒç¿æéã
èšäºã®æŠèŠ
åŠç¿ã¯é 調ãããããåžžã«é ã®çé ã«ãã£ãã®ãTryHackMeã®ãã©ãŠã¶ç°å¢ïŒAttackBoxïŒãæ¢ã«ã¿ã€ã ãªãããã§äœ¿çšã§ããªããšããç¹ã§ãããå®éã«æã䜿ã£ãŠæ€èšŒã§ããªããã©ãããã¯ããšã³ãžãã¢ã«ãšã£ãп倧ã®ã¹ãã¬ã¹ã§ããããªããèªåã®PCãçŽæ¥ç¹ãã°ããããããæãç«ã£ãæãããWindowsãšLinuxã®å£ãè¶ãããã¹ãªãªã³ã°ãªç°å¢æ§ç¯ã®æ ãå§ãŸããŸããã
æ¬æ
1. ãã©ãŠã¶ã®å£ãè¶ ããŠïŒèªåç°å¢ãžã®æžæ
ãããŸã§ãç§ã¯TryHackMeãæäŸãããAttackBoxãã䜿ãããã©ãŠã¶è¶ãã«æŒç¿ãè¡ã£ãŠããŸããããããããããç®æã以äžããã€ãŸã§ãåãç©ã®ç°å¢ã§ã¯ããããŸããããèªåã®æã§ãèªåã®PCããçŽæ¥ã©ãã«ç¹ãããããä»ã«ææ®µã¯ãªãã®ãïŒãã®çŽç²ãªæ¬²æ±ããä»åã®ææŠã®åååã§ããã
Windowsã®äžã«Linuxç°å¢ãå ±åããããWSL2ïŒWindows Subsystem for Linux 2ïŒããããŒã¹ã«ãäžçã®ãããã³ã°ã»ã©ããšèªåãçŽçµããVPNïŒVirtual Private NetworkïŒã®æ§ç¯ãããã¯ãç§ã ãã®ãããã«ãŒã®é ãå®¶ããäœãäœæ¥ã§ããããŸããã
2. ãã©ãã«ããæé«ã®ã¹ãã€ã¹ïŒOSã®å¢çç·ã§æ Œéãã
ããããæ§ç¯ã¯äžççžã§ã¯ãããŸããã§ãããããã§çŽé¢ããã®ã¯ããŸãã«ãæè¡ã®æŽç€Œããšãèšããå°ããªããããé«ãå£ãã¡ã§ããã
èšå®ãã¡ã€ã«ã®è¿·å®®: TryHackMeããããŠã³ããŒãããæ¥ç¶çšã® .ovpn ãã¡ã€ã«ããªããæ¡åŒµåãæ¶ããŠããããäžèº«ãããŸãèªèãããªãã£ãããšãæåã¯ãã¡ã€ã«ã®æ±ãã ãã§è¶³æ¢ããé£ãããŸããã
èšèªã®å£ïŒãã¹ã®äžäžèŽïŒ: Windowsã®ãã¡ã€ã«ã·ã¹ãã ïŒC:\Users...ïŒãšãWSL2äžã®Linuxãã¹ã®æžãæ¹ã®éããSEãšããŠã®çµéšããããªããããããããã©ã£ã¡ã ã£ãïŒããšé ãæ±ããç¬éããããŸããã
ããã§ç§ãæã£ãã®ã¯ãexplorer.exe . ãšããéæ³ã®ã³ãã³ãã§ãããWindowsã®ãšã¯ã¹ãããŒã©ãŒããLinuxã®ãã£ã¬ã¯ããªãçŽæ¥æäœããç©ççã«ãã¡ã€ã«ãéã蟌ããOSã®å£ãç©ççã«çªãç Žã£ããããªãå°ããªãããã確å®ãªåå©ã®ç¬éã§ããã
3. éåœã®ç¬éïŒãInitialization Sequence Completedã
èšå®ãæŽããUbuntuã®ã¿ãŒããã«ã§VPNèµ·åã³ãã³ããå©ãã ç»é¢ãåãå°œããçœããã°ã®æ»ããšã©ãŒã§æ¢ãŸããªãæ¢ãŸããªãšç¥ããããªæ°æã¡ã§ç»é¢ãèŠã€ããŸãããããŠæ°ç§åŸã
Initialization Sequence Completed
ãã®äžè¡ãéãã«çŸãããšããç§ã®PCã¯äžçäžã®ããã«ãŒãæã巚倧ãªãããã¯ãŒã¯ã®äžéšã«ãªããŸããã1æéã®å¶éã«æ¯ããå¿ èŠã¯ãããããŸãããç¡éã®æŒç¿æéããä»ããã«ãããèªäœã®ç°å¢ãäžçãšç¹ãã£ããéé宣èšããèãããããªæ°ãããŸããã
4. éå ·ãç ãïŒèªåè²ã«æãŸãã¿ãŒããã«
ç°å¢ãæŽãã°ã次ã¯éå ·ã®æå ¥ãã§ããWindows Terminalãã«ã¹ã¿ãã€ãºãããïŒããã¿ã³äžã€ã§å³åº§ã«Ubuntuãç«ã¡äžããããã«èšå®ãããã«ãåµå¯ã«æ¬ ãããªã nslookup ã whois ãªã©ã®ããŒã«ããsudo apt install ã§äžã€ãã€ã€ã³ã¹ããŒã«ããŠãããŸãã
å¿ èŠãªãã®ããå¿ èŠãªæã«ãèªåã®æã§çµã¿èŸŒãã§ããããã®ãéå ·ãèªåè²ã«æããŠããéçšããããããšã³ãžãã¢ãªã³ã°ã®æ¬åœã®é¢çœãã ãšå確èªããŸããã
5. çµã³ïŒååçåµå¯ïŒPassive ReconnaissanceïŒã®éããªå§ãŸã
VPNã¯ç¹ãããŸãããããããä»åã®ã¿ãŒã²ããã¯ãè§ŠããŠã¯ãããªããçžæã§ãã çžæã«äžåã®éåæãäžãããã€ã³ã¿ãŒãããã®æµ·ã«æŒã埮ããªè¶³è·¡ãæŸãéãããååçåµå¯ããæåŒ·ã®ç°å¢ãæã«å ¥ããä»ãããããæ¬æ Œçãªèª¿æ»ãå§ãŸããŸãã
仿¥ã®ã決ãå°è©ã ããšã©ãŒã¡ãã»ãŒãžã¯ãã·ã¹ãã ãæçµ¶ããŠããã®ã§ã¯ãªãããæ£ããäœæ³ãæããããšããŠãããã ãã ã£ããOSã®å£ãè¶ããèšå®ãã¡ã€ã«ãäžæåãã€æŽããå ã«ãæ¬ç©ã®ãšã³ãžãã¢ãªã³ã°ã®é¢çœããé ããŠãããã
æ¯ãè¿ãã»ãŸãšã
èªåç°å¢ãæ§ç¯ããããšã§ãåŠç¿ã®å¹çã ãã§ãªããã·ã¹ãã ã«å¯Ÿããç解床ãäžæ®µéäžãã£ãããã«æããŸãããã©ãã«ã¯ãããŸãããããããèªåã§è§£æ±ºããçµéšãã®ãã®ããæé«ã®åŠç¿ææã§ããã
次åã®äºå
æåŒ·ã®æŠåšïŒWSL2ç°å¢ïŒãæºããæ¬¡ã¯ããããã¿ãŒã²ããã®ãè匱æ§ã®äºå ããæ¢ãåœãŠãŸãã ãWHOISãDNSããããŠGoogle Dorkingãããããã®æµ·ããæ å ±ãé£ãããã®æ¥µæããäŒãããŸãïŒ