Vulhub環(huán)境配置過程
環(huán)境:vm15 ubuntu16.04
在虛擬機中安裝ubuntu
安裝vmware tools
進入系統(tǒng)，點擊虛擬機-->安裝tools，等待系統(tǒng)彈出tools的壓縮包，將壓
縮包中的文件夾提取到桌面上，進入文件夾運行.pl文件，安裝tools，第一
個詢問輸入yes，之后一直回車就好了
換源
在Ubuntu系統(tǒng)上使用"apt-get install"進行軟件安裝更新的時候，
由于使用的源是國外的，網(wǎng)絡速度非常緩慢，本文記錄在Ubuntu系統(tǒng)
上進行更換國內源。
- 首先需要將原始的源文件進行備份，命令行如下：
sudo cp /etc/apt/sources.list /etc/apt/sources.list.bak
- 接下來，修改源文件/etc/apt/sources.list，添加國內源：
sudo vim /etc/apt/sources.list
如果系統(tǒng)提示沒有vim命令，可以 將vim改為vi或者先使用sudo apt install vim-gnome先安裝vim
-
先將原文件的內容進行刪除，然后添加國內源，常用的國內源有如下：
- 阿里源
deb http://mirrors.aliyun.com/ubuntu/ xenial main restricted universe multiverse deb http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted universe multiverse deb http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted universe multiverse deb http://mirrors.aliyun.com/ubuntu/ xenial-proposed main restricted universe multiverse deb http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse deb-src http://mirrors.aliyun.com/ubuntu/ xenial main restricted universe multiverse deb-src http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted universe multiverse deb-src http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted universe multiverse deb-src http://mirrors.aliyun.com/ubuntu/ xenial-proposed main restricted universe multiverse deb-src http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse- 清華源
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic main restricted universe multiverse deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic main restricted universe multiverse deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-updates main restricted universe multiverse deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-updates main restricted universe multiverse deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-backports main restricted universe multiverse deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-backports main restricted universe multiverse deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-security main restricted universe multiverse deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-security main restricted universe multiverse deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-proposed main restricted universe multiverse deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-proposed main restricted universe multiverse- 中科大源
deb https://mirrors.ustc.edu.cn/ubuntu/ focal main restricted universe multiverse deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal main restricted universe multiverse deb https://mirrors.ustc.edu.cn/ubuntu/ focal-updates main restricted universe multiverse deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-updates main restricted universe multiverse deb https://mirrors.ustc.edu.cn/ubuntu/ focal-backports main restricted universe multiverse deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-backports main restricted universe multiverse deb https://mirrors.ustc.edu.cn/ubuntu/ focal-security main restricted universe multiverse deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-security main restricted universe multiverse deb https://mirrors.ustc.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse
將上面給出的源復制到文件/etc/apt/sources.list即可。
-
最后，使用下面命令進行源更新：
sudo apt-get update
docker安裝
注意：這里的命令的運行順序不能變，
- 安裝vim、curl
sudo apt install vim
sudo apt install curl
- 安裝pip
curl -s https://bootstrap.pypa.io/get-pip.py | python3
- 安裝docker
curl -s https://get.docker.com/ | sh
更換docker源
更換docker源需要修改docker/daemon.json文件，有的環(huán)境在安裝了docker之后etc文件夾下面有可能沒有docker文件夾，這個時候就需要自己創(chuàng)建文件。
文件創(chuàng)建好之后，修改daemon.json文件，添加源：
sudo vim daemon.json
源：
{
"registry-mirrors": [
"https://hub-mirror.c.163.com",
"https://ustc-edu-cn.mirror.aliyuncs.com",
"https://ghcr.io",
"https://mirror.baidubce.com"
]
}
重啟docker
service docker restart
安裝docker-composer
sudo pip install docker-compose
獲取vulhub
- 安裝git
sudo apt install git
- 克隆vulhub庫
git clone https://github.com/vulhub/vulhub.git
漏洞復現(xiàn)
- 進入一個漏洞/環(huán)境目錄
cd vulhub/httpd/CVE-2017-15715
- 自動化編譯環(huán)境
sudo docker-compose build
- 啟動整個環(huán)境
sudo docker-compose up -d
sudo docker-compose config //查看運行的端口
- 查看本地ip地址
ifconfig
（ens33中的inet addr屬性的值）
- 刪除整個環(huán)境
sudo docker-compose down -v
總結
vulhub靶場，可以復現(xiàn)各種各樣的中間件的漏洞
參考博客
https://www.cnblogs.com/jerrylocker/p/10818650.html
https://www.cnblogs.com/jerrylocker/p/10818650.html
https://cloud.tencent.com/developer/article/1769231
