{"id":560,"date":"2026-09-18T13:42:37","date_gmt":"2026-09-18T05:42:37","guid":{"rendered":"https:\/\/cloverdayssss.top\/?p=560"},"modified":"2026-09-18T13:53:49","modified_gmt":"2026-09-18T05:53:49","slug":"%e7%bd%91%e5%ae%89%e6%94%bb%e9%98%b2%e5%ae%9e%e9%aa%8c%ef%bc%88%e4%b8%80%ef%bc%89","status":"publish","type":"post","link":"https:\/\/cloverdayssss.top\/index.php\/2026\/09\/18\/%e7%bd%91%e5%ae%89%e6%94%bb%e9%98%b2%e5%ae%9e%e9%aa%8c%ef%bc%88%e4%b8%80%ef%bc%89\/","title":{"rendered":"\u7f51\u5b89\u653b\u9632\u5b9e\u9a8c\uff08\u4e00\uff09"},"content":{"rendered":"<h1>\u7f51\u7edc\u5b89\u5168\u5bf9\u6297\u80fd\u529b\u5b9e\u8df5 \u00b7 \u8bfe\u7a0b\u5b9e\u9a8c\u62a5\u544a<\/h1>\n<p><strong>\u5b9e\u9a8c\u540d\u79f0\uff1a\u653b\u9632\u5bf9\u6297\u73af\u5883\u642d\u5efa<\/strong><\/p>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u9879\u76ee<\/th>\n<th align=\"left\">\u5185\u5bb9<\/th>\n<th align=\"left\">\u9879\u76ee<\/th>\n<th align=\"left\">\u5185\u5bb9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">\u5b66\u9662<\/td>\n<td align=\"left\">\u7f51\u7edc\u4e0e\u4fe1\u606f\u5b89\u5168\u5b66\u9662<\/td>\n<td align=\"left\">\u59d3\u540d<\/td>\n<td align=\"left\">xxx<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u73ed\u7ea7<\/td>\n<td align=\"left\">xxxxxxx<\/td>\n<td align=\"left\">\u5b66\u53f7<\/td>\n<td align=\"left\">xxxxxx<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><\/td>\n<td align=\"left\"><\/td>\n<td align=\"left\">\u5b9e\u9a8c\u65e5\u671f<\/td>\n<td align=\"left\">2026 \u5e74 9 \u6708 17 \u65e5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h2>\u4e00\u3001\u5b9e\u9a8c\u76ee\u7684<\/h2>\n<ol>\n<li>\u5b66\u4e60\u548c\u4e86\u89e3 Linux Ubuntu \u64cd\u4f5c\u7cfb\u7edf\uff1b<\/li>\n<li>\u638c\u63e1 Linux \u57fa\u672c\u547d\u4ee4\uff1b<\/li>\n<li>\u638c\u63e1 VMware \u4e09\u79cd\u7f51\u7edc\u6a21\u5f0f\uff08\u6865\u63a5\u3001NAT\u3001\u4ec5\u4e3b\u673a\uff09\u7684\u539f\u7406\u4e0e\u533a\u522b\uff1b<\/li>\n<li>\u4e86\u89e3\u57fa\u672c\u7684\u7f51\u7edc\u653b\u9632\u5bf9\u6297\u6280\u6218\u672f\uff0c\u4e3a\u540e\u7eed\u6e17\u900f\u6d4b\u8bd5\u5b9e\u9a8c\u5efa\u7acb\u53ef\u590d\u73b0\u7684\u9776\u573a\u73af\u5883\u3002<\/li>\n<\/ol>\n<h2>\u4e8c\u3001\u5b9e\u9a8c\u6240\u7528\u4eea\u5668\uff08\u5b9e\u9a8c\u73af\u5883\uff09<\/h2>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u9879\u76ee<\/th>\n<th align=\"left\">\u914d\u7f6e\u8bf4\u660e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">\u5bbf\u4e3b\u673a<\/td>\n<td align=\"left\">Windows\uff0c16 \u903b\u8f91\u6838\u5fc3\uff0c31.3 GB \u5185\u5b58\uff0cC \u76d8\u53ef\u7528 107 GB<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u865a\u62df\u5316\u5e73\u53f0<\/td>\n<td align=\"left\">VMware Workstation 25.0.1\uff08\u865a\u62df\u786c\u4ef6\u7248\u672c 22\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u653b\u51fb\u673a<\/td>\n<td align=\"left\">Kali Linux 2026.1\uff084 vCPU \/ 4 GB \u5185\u5b58 \/ 20 GB \u78c1\u76d8\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u8df3\u677f\u673a<\/td>\n<td align=\"left\">Ubuntu 24.04.3 LTS\uff08noble\uff0c2 vCPU \/ 4 GB \u5185\u5b58 \/ 10 GB \u78c1\u76d8\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u9776\u673a<\/td>\n<td align=\"left\">Ubuntu 24.04.3 LTS\uff08noble\uff0c4 vCPU \/ 4 GB \u5185\u5b58 \/ 10 GB \u78c1\u76d8\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u865a\u62df\u7f51\u7edc<\/td>\n<td align=\"left\">VMnet8\uff08NAT\uff0c192.168.116.0\/24\uff09\u3001VMnet1\uff08\u4ec5\u4e3b\u673a\uff0c192.168.113.0\/24\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u8f6f\u4ef6\u6e90<\/td>\n<td align=\"left\">\u6e05\u534e\u5927\u5b66\u5f00\u6e90\u8f6f\u4ef6\u955c\u50cf\u7ad9 <code>https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5ba2\u6237\u673a\u5de5\u5177<\/td>\n<td align=\"left\">open-vm-tools 2:13.0.10\uff08\u5347\u7ea7\u540e\u4e24\u53f0 Ubuntu \u5747\u4e3a\u8be5\u7248\u672c\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e09\u3001\u5b9e\u9a8c\u57fa\u672c\u539f\u7406\u53ca\u6b65\u9aa4<\/h2>\n<h3>3.1 VMware \u4e09\u79cd\u7f51\u7edc\u6a21\u5f0f\u539f\u7406<\/h3>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u6a21\u5f0f<\/th>\n<th align=\"left\">\u539f\u7406<\/th>\n<th align=\"left\">\u8fde\u901a\u6027\u7279\u70b9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">\u6865\u63a5 Bridged<\/td>\n<td align=\"left\">\u865a\u62df\u673a\u7ecf VMnet0 \u76f4\u63a5\u6865\u63a5\u5230\u7269\u7406\u7f51\u5361\uff0c\u4e0e\u5bbf\u4e3b\u673a\u540c\u5904\u7269\u7406\u7f51\u6bb5\uff0c\u72ec\u7acb\u83b7\u5f97 IP<\/td>\n<td align=\"left\">\u53ef\u8bbf\u95ee\u5916\u7f51\uff1b\u88ab\u540c\u7f51\u6bb5\u5176\u4ed6\u4e3b\u673a\u76f4\u63a5\u8bbf\u95ee\uff1b\u66b4\u9732\u9762\u6700\u5927<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">NAT<\/td>\n<td align=\"left\">\u865a\u62df\u673a\u7ecf VMnet8 \u7531\u5bbf\u4e3b\u673a\u5b8c\u6210\u5730\u5740\u8f6c\u6362\u540e\u51fa\u7f51\uff0c\u5bbf\u4e3b\u673a\u5145\u5f53\u7f51\u5173\u4e0e DHCP \u670d\u52a1\u5668<\/td>\n<td align=\"left\">\u865a\u62df\u673a\u80fd\u51fa\u7f51\uff1b\u5916\u90e8\u4e3b\u673a\u65e0\u6cd5\u4e3b\u52a8\u8bbf\u95ee\u865a\u62df\u673a\uff1b\u9690\u853d\u6027\u8f83\u597d<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u4ec5\u4e3b\u673a Host-only<\/td>\n<td align=\"left\">\u4ec5\u901a\u8fc7 VMnet1 \u6216\u81ea\u5b9a\u4e49 VMnet \u4e0e\u5bbf\u4e3b\u673a\u901a\u4fe1\uff0c\u65e0 NAT\u3001\u65e0\u7269\u7406\u7f51\u5361\u6865\u63a5<\/td>\n<td align=\"left\">\u4e0e\u4e92\u8054\u7f51\u5b8c\u5168\u9694\u79bb\uff1b\u4ec5\u5bbf\u4e3b\u673a\u4e0e\u540c VMnet \u5185\u865a\u62df\u673a\u4e92\u901a<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u672c\u5b9e\u9a8c\u91c7\u7528 <strong>NAT + \u4ec5\u4e3b\u673a<\/strong> \u7ec4\u5408\u6784\u9020\u4e24\u5c42\u7f51\u7edc\uff1a\u653b\u51fb\u673a\u4f4d\u4e8e NAT \u8fb9\u754c\u6bb5\uff0c\u9776\u673a\u4f4d\u4e8e\u4e0e\u4e92\u8054\u7f51\u9694\u79bb\u7684\u4ec5\u4e3b\u673a\u5185\u7f51\u6bb5\uff0c\u8df3\u677f\u673a\u53cc\u7f51\u5361\u8de8\u63a5\u4e24\u4e2a\u7f51\u6bb5\u3002<\/p>\n<h3>3.2 \u62d3\u6251\u8bbe\u8ba1\u4e0e IP \u5730\u5740\u5206\u914d<\/h3>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/topology.png\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u653b\u9632\u5bf9\u6297\u73af\u5883\u7f51\u7edc\u62d3\u6251\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/topology.png\" alt=\"\u653b\u9632\u5bf9\u6297\u73af\u5883\u7f51\u7edc\u62d3\u6251\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 1\u3000\u653b\u9632\u5bf9\u6297\u73af\u5883\u7f51\u7edc\u62d3\u6251\u56fe<\/strong><\/p>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u4e3b\u673a<\/th>\n<th align=\"left\">\u89d2\u8272<\/th>\n<th align=\"left\">\u7f51\u5361<\/th>\n<th align=\"left\">IP \u5730\u5740\/\u63a9\u7801<\/th>\n<th align=\"left\">\u7f51\u7edc\u6a21\u5f0f<\/th>\n<th align=\"left\">\u9ed8\u8ba4\u7f51\u5173<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">Kali Linux<\/td>\n<td align=\"left\">\u653b\u51fb\u673a<\/td>\n<td align=\"left\">eth0<\/td>\n<td align=\"left\">192.168.116.128\/24<\/td>\n<td align=\"left\">VMnet8\uff08NAT\uff09<\/td>\n<td align=\"left\">192.168.116.2<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">Ubuntu1<\/td>\n<td align=\"left\">\u8fb9\u754c\u8df3\u677f \/ \u5185\u7f51\u7f51\u5173<\/td>\n<td align=\"left\">ens33<\/td>\n<td align=\"left\">192.168.116.129\/24<\/td>\n<td align=\"left\">VMnet8\uff08NAT\uff09<\/td>\n<td align=\"left\">192.168.116.2<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">Ubuntu1<\/td>\n<td align=\"left\">\u5185\u7f51\u7f51\u5173<\/td>\n<td align=\"left\">ens37<\/td>\n<td align=\"left\">192.168.113.128\/24<\/td>\n<td align=\"left\">VMnet1\uff08Host-only\uff09<\/td>\n<td align=\"left\">\u2014\uff08\u4e0d\u914d\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">Ubuntu2<\/td>\n<td align=\"left\">\u5185\u7f51\u9776\u673a<\/td>\n<td align=\"left\">ens33<\/td>\n<td align=\"left\">192.168.113.129\/24<\/td>\n<td align=\"left\">VMnet1\uff08Host-only\uff09<\/td>\n<td align=\"left\">\u2014\uff08\u4e0d\u914d\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>3.3 \u865a\u62df\u673a\u4e0e\u865a\u62df\u7f51\u7edc\u914d\u7f6e\u6b65\u9aa4<\/h3>\n<ol>\n<li><strong>\u865a\u62df\u7f51\u7edc\u914d\u7f6e<\/strong>\uff1a\u786e\u8ba4 VMnet8 \u4e3a NAT \u6a21\u5f0f\uff08\u5b50\u7f51 192.168.116.0\/24\uff0c\u7f51\u5173 192.168.116.2\uff09\uff0cVMnet1 \u4e3a\u300c\u4ec5\u4e3b\u673a\u300d\u6a21\u5f0f\uff08\u5b50\u7f51 192.168.113.0\/24\uff09\u3002<br \/>\n<img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/02-vmnet8-nat.png\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 2\u3000VMnet8 \u914d\u7f6e\u4e3a NAT \u6a21\u5f0f\" title=\"\"><\/li >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/02-vmnet8-nat.png\" alt=\"\u56fe 2\u3000VMnet8 \u914d\u7f6e\u4e3a NAT \u6a21\u5f0f\" title=\"\"><\/li><\/noscript>\n<\/ol>\n<p><strong>\u56fe 2\u3000VMnet8 \u914d\u7f6e\u4e3a NAT \u6a21\u5f0f<\/strong><\/p>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/03-vmnet1-hostonly.png\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 3\u3000VMnet1 \u914d\u7f6e\u4e3a\u4ec5\u4e3b\u673a\u6a21\u5f0f\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/03-vmnet1-hostonly.png\" alt=\"\u56fe 3\u3000VMnet1 \u914d\u7f6e\u4e3a\u4ec5\u4e3b\u673a\u6a21\u5f0f\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 3\u3000VMnet1 \u914d\u7f6e\u4e3a\u4ec5\u4e3b\u673a\u6a21\u5f0f<\/strong><\/p>\n<ol start=\"2\">\n<li><strong>\u4e3a\u8df3\u677f\u673a\u6dfb\u52a0\u7b2c\u4e8c\u5757\u7f51\u5361<\/strong>\uff1a\u5728\u865a\u62df\u673a\u8bbe\u7f6e\u4e2d\u6dfb\u52a0\u7f51\u7edc\u9002\u914d\u5668\uff08<code>ethernet1<\/code>\uff0cPCI \u69fd\u4f4d 37\uff09\uff0c\u7b2c\u4e00\u5757\u8fde VMnet8\u3001\u7b2c\u4e8c\u5757\u8fde VMnet1\uff0c\u4f7f\u5176\u540c\u65f6\u4f4d\u4e8e\u4e24\u4e2a\u7f51\u6bb5\uff1b\u540c\u65f6\u5c06\u9776\u673a\u7f51\u5361\u7531 NAT \u5207\u6362\u81f3 VMnet1\u3002<br \/>\n<img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/04-jumper-dual-nic.png\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 4\u3000\u8df3\u677f\u673a\u53cc\u7f51\u5361\u8bbe\u7f6e\uff08NAT + \u81ea\u5b9a\u4e49 VMnet1\uff09\" title=\"\"><\/li >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/04-jumper-dual-nic.png\" alt=\"\u56fe 4\u3000\u8df3\u677f\u673a\u53cc\u7f51\u5361\u8bbe\u7f6e\uff08NAT + \u81ea\u5b9a\u4e49 VMnet1\uff09\" title=\"\"><\/li><\/noscript>\n<\/ol>\n<p><strong>\u56fe 4\u3000\u8df3\u677f\u673a\u53cc\u7f51\u5361\u8bbe\u7f6e\uff08NAT + \u81ea\u5b9a\u4e49 VMnet1\uff09<\/strong><\/p>\n<ol start=\"3\">\n<li><strong>\u5f00\u542f\u5185\u6838\u8f6c\u53d1<\/strong>\uff1a\u5728\u8df3\u677f\u673a\u4e0a\u5f00\u542f <code>net.ipv4.ip_forward<\/code>\uff0c\u4f7f\u8de8\u7f51\u6bb5\u6d41\u91cf\u53ef\u88ab\u8f6c\u53d1\u3002<\/li>\n<li><strong>\u914d\u7f6e\u8de8\u7f51\u6bb5\u8def\u7531<\/strong>\uff1aKali \u4e0e\u9776\u673a\u5404\u6dfb\u52a0\u4e00\u6761\u6307\u5411\u5bf9\u7aef\u7f51\u6bb5\u7684\u8def\u7531\uff0c\u5747\u7ecf\u8df3\u677f\u673a\u8f6c\u53d1\u3002<br \/>\n<img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/05-jumper-ip.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 5\u3000\u8df3\u677f\u673a\u5730\u5740\u4e0e\u8def\u7531\u8868\" title=\"\"><\/li >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/05-jumper-ip.jpg\" alt=\"\u56fe 5\u3000\u8df3\u677f\u673a\u5730\u5740\u4e0e\u8def\u7531\u8868\" title=\"\"><\/li><\/noscript>\n<\/ol>\n<p><strong>\u56fe 5\u3000\u8df3\u677f\u673a\u5730\u5740\u4e0e\u8def\u7531\u8868<\/strong><\/p>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/06-kali-ip.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 6\u3000Kali \u5730\u5740\u4e0e\u8def\u7531\u8868\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/06-kali-ip.jpg\" alt=\"\u56fe 6\u3000Kali \u5730\u5740\u4e0e\u8def\u7531\u8868\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 6\u3000Kali \u5730\u5740\u4e0e\u8def\u7531\u8868<\/strong><\/p>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/07-target-ip.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 7\u3000\u9776\u673a\u5730\u5740\u4e0e\u8def\u7531\u8868\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/07-target-ip.jpg\" alt=\"\u56fe 7\u3000\u9776\u673a\u5730\u5740\u4e0e\u8def\u7531\u8868\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 7\u3000\u9776\u673a\u5730\u5740\u4e0e\u8def\u7531\u8868<\/strong><\/p>\n<ol start=\"5\">\n<li><strong>\u8fde\u901a\u6027\u9a8c\u8bc1<\/strong>\uff1a\u6309\u300c\u540c\u7f51\u6bb5 \u2192 \u8de8\u7f51\u6bb5 \u2192 \u51fa\u7f51\u300d\u4e09\u5c42\u987a\u5e8f\u9010\u7ea7\u9a8c\u8bc1\u8fde\u901a\u6027\u3002<br \/>\n<img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/08-connectivity.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 8\u3000\u8fde\u901a\u6027\u9a8c\u8bc1\uff1aping \u4e0e traceroute\uff08\u7b2c\u4e00\u8df3\u4e3a\u8df3\u677f\u673a\uff09\" title=\"\"><\/li >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/08-connectivity.jpg\" alt=\"\u56fe 8\u3000\u8fde\u901a\u6027\u9a8c\u8bc1\uff1aping \u4e0e traceroute\uff08\u7b2c\u4e00\u8df3\u4e3a\u8df3\u677f\u673a\uff09\" title=\"\"><\/li><\/noscript>\n<\/ol>\n<p><strong>\u56fe 8\u3000\u8fde\u901a\u6027\u9a8c\u8bc1\uff1aping \u4e0e traceroute\uff08\u7b2c\u4e00\u8df3\u4e3a\u8df3\u677f\u673a\uff09<\/strong><\/p>\n<p><strong>\u5173\u952e\u914d\u7f6e\u547d\u4ee4<\/strong><\/p>\n<pre><code class=\"language-bash line-numbers\"># \u2460 \u8df3\u677f\u673a\u5f00\u542f\u5185\u6838\u8f6c\u53d1\nnet.ipv4.ip_forward=1\n<\/code><\/pre>\n<pre><code class=\"language-bash line-numbers\"># \u2461 \u8df3\u677f\u673a\u914d\u7f6e NAT \u51fa\u7f51\uff08\u4f7f\u5185\u7f51\u9776\u673a\u53ef\u4e34\u65f6\u8bbf\u95ee\u4e92\u8054\u7f51\uff09\nsudo iptables -t nat -A POSTROUTING -s 192.168.113.0\/24 -o ens33 -j MASQUERADE\n<\/code><\/pre>\n<pre><code class=\"language-bash line-numbers\"># \u2462 Kali \u6dfb\u52a0\u5185\u7f51\u8def\u7531\nsudo ip route replace 192.168.113.0\/24 via 192.168.116.129\n<\/code><\/pre>\n<pre><code class=\"language-bash line-numbers\"># \u2463 \u9776\u673a\u6dfb\u52a0\u56de\u7a0b\u8def\u7531\nsudo ip route replace 192.168.116.0\/24 via 192.168.113.128\n<\/code><\/pre>\n<h3>3.4 \u8f6f\u4ef6\u66f4\u65b0\u6e90\uff08APT \u6e90\uff09\u4fee\u6539<\/h3>\n<p>\u5b9e\u9a8c\u673a\u4e3a Ubuntu 24.04\uff08noble\uff09\uff0c\u5176\u8f6f\u4ef6\u6e90\u914d\u7f6e\u5df2\u7531\u4f20\u7edf\u7684 <code>\/etc\/apt\/sources.list<\/code> \u6539\u4e3a <strong>DEB822 \u683c\u5f0f<\/strong> \u7684 <code>\/etc\/apt\/sources.list.d\/ubuntu.sources<\/code>\uff0c\u66ff\u6362\u65b9\u5f0f\u4e0e\u65e7\u7248\u672c\u4e0d\u540c\u3002<\/p>\n<pre><code class=\"language-bash line-numbers\"># \u5907\u4efd\u539f\u914d\u7f6e\nsudo cp \/etc\/apt\/sources.list.d\/ubuntu.sources \/etc\/apt\/sources.list.d\/ubuntu.sources.bak\n<\/code><\/pre>\n<pre><code class=\"language-ini line-numbers\"># \/etc\/apt\/sources.list.d\/ubuntu.sources \u2014\u2014 \u66ff\u6362\u4e3a\u6e05\u534e\u6e90\nTypes: deb\nURIs: https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu\nSuites: noble noble-updates noble-backports\nComponents: main restricted universe multiverse\nSigned-By: \/usr\/share\/keyrings\/ubuntu-archive-keyring.gpg\n\nTypes: deb\nURIs: https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu\nSuites: noble-security\nComponents: main restricted universe multiverse\nSigned-By: \/usr\/share\/keyrings\/ubuntu-archive-keyring.gpg\n<\/code><\/pre>\n<pre><code class=\"language-bash line-numbers\"># \u9a8c\u8bc1\u5e76\u5b89\u88c5 open-vm-tools\nsudo apt update\nsudo apt install -y open-vm-tools open-vm-tools-desktop\n<\/code><\/pre>\n<p><strong>\u5b9e\u6d4b\u7ed3\u679c<\/strong>\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">\u547d\u4e2d:1 https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu noble InRelease\n\u547d\u4e2d:2 https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu noble-updates InRelease\n\u547d\u4e2d:3 https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu noble-backports InRelease\n\u547d\u4e2d:4 https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu noble-security InRelease\n\u6b63\u5728\u8bfb\u53d6\u8f6f\u4ef6\u5305\u5217\u8868... \u5b8c\u6210\n<\/code><\/pre>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/09-apt-update.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 9\u3000apt update \u547d\u4e2d\u6e05\u534e\u6e90\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/09-apt-update.jpg\" alt=\"\u56fe 9\u3000apt update \u547d\u4e2d\u6e05\u534e\u6e90\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 9\u3000apt update \u547d\u4e2d\u6e05\u534e\u6e90<\/strong><\/p>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/10-vmtools-install.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 10\u3000\u5b89\u88c5 open-vm-tools\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/10-vmtools-install.jpg\" alt=\"\u56fe 10\u3000\u5b89\u88c5 open-vm-tools\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 10\u3000\u5b89\u88c5 open-vm-tools<\/strong><\/p>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/11-vmtools-verify.png\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 11\u3000\u590d\u6838\u5b89\u88c5\u7ed3\u679c\uff08\u5df2\u662f\u6700\u65b0\u7248\uff09\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/11-vmtools-verify.png\" alt=\"\u56fe 11\u3000\u590d\u6838\u5b89\u88c5\u7ed3\u679c\uff08\u5df2\u662f\u6700\u65b0\u7248\uff09\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 11\u3000\u590d\u6838\u5b89\u88c5\u7ed3\u679c\uff08\u5df2\u662f\u6700\u65b0\u7248\uff09<\/strong><\/p>\n<p><strong>\u8865\u5145\uff1a\u6e05\u7406\u5b89\u88c5\u4ecb\u8d28\u6b8b\u7559\u6e90<\/strong><\/p>\n<p>\u5b9e\u9a8c\u8fc7\u7a0b\u4e2d\u53d1\u73b0\u7cfb\u7edf\u6b8b\u7559\u4e86\u4e00\u6761\u5b89\u88c5\u4ecb\u8d28\u6e90\uff0c\u5bfc\u81f4 <code>apt update<\/code> \u76f4\u63a5\u62a5\u9519\u9000\u51fa\uff0c\u9700\u5148\u884c\u6e05\u7406\uff08\u8be6\u89c1 5.1 \u8282\uff09\u3002<\/p>\n<pre><code class=\"language-bash line-numbers\">grep -rn 'cdrom' \/etc\/apt\/sources.list \/etc\/apt\/sources.list.d\/ 2&gt;\/dev\/null\nsudo sed -i.bak '\/cdrom\/s\/^\/#\/' \/etc\/apt\/sources.list\n<\/code><\/pre>\n<h3>3.5 Ubuntu \u57fa\u672c\u547d\u4ee4\u4e0e\u6587\u4ef6\u7cfb\u7edf\u63a2\u7d22<\/h3>\n<blockquote><p>\n  \u4ee5\u4e0b\u547d\u4ee4\u5747\u5728\u8df3\u677f\u673a\uff08Ubuntu1\uff09\u4e0a\u5b9e\u9645\u6267\u884c\uff0c\u8f93\u51fa\u4e3a\u771f\u5b9e\u56de\u663e\u3002\n<\/p><\/blockquote>\n<h4>\uff081\uff09\u7cfb\u7edf\u57fa\u7840\u4fe1\u606f\u4e0e\u5f53\u524d\u8def\u5f84<\/h4>\n<pre><code class=\"language-bash line-numbers\">whoami &amp;&amp; id\nuname -a\ngrep PRETTY_NAME \/etc\/os-release\npwd\n<\/code><\/pre>\n<p>\u5b9e\u6d4b\u8f93\u51fa\uff08\u56fe 12\u3001\u56fe 13\uff09\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">cloverdayssss\nuid=1000(cloverdayssss) gid=1000(cloverdayssss) \u7ec4=1000(cloverdayssss),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),100(users),114(lpadmin)\nLinux cloverdayssss-VMware-Virtual-Platform 6.14.0-37-generic #37~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC x86_64 GNU\/Linux\nPRETTY_NAME=\"Ubuntu 24.04.3 LTS\"\n\/home\/cloverdayssss\/\u684c\u9762\n<\/code><\/pre>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/12-sysinfo.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 12\u3000\u7cfb\u7edf\u4fe1\u606f\u4e0e\u7528\u6237\u8eab\u4efd\uff08whoami \/ id \/ uname\uff09\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/12-sysinfo.jpg\" alt=\"\u56fe 12\u3000\u7cfb\u7edf\u4fe1\u606f\u4e0e\u7528\u6237\u8eab\u4efd\uff08whoami \/ id \/ uname\uff09\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 12\u3000\u7cfb\u7edf\u4fe1\u606f\u4e0e\u7528\u6237\u8eab\u4efd\uff08whoami \/ id \/ uname\uff09<\/strong><\/p>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/13-pwd.png\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 13\u3000\u5f53\u524d\u6240\u5728\u8def\u5f84 pwd\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/13-pwd.png\" alt=\"\u56fe 13\u3000\u5f53\u524d\u6240\u5728\u8def\u5f84 pwd\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 13\u3000\u5f53\u524d\u6240\u5728\u8def\u5f84 pwd<\/strong><\/p>\n<h4>\uff082\uff09\u65b0\u5efa\u6587\u4ef6\u5e76\u5199\u5165\u59d3\u540d\u62fc\u97f3<\/h4>\n<pre><code class=\"language-bash line-numbers\">cd ~\ntouch 25189100283.txt          # \u4ee5\u5b66\u53f7\u547d\u540d\ncat &gt; 25189100283.txt          # \u5199\u5165\u59d3\u540d\u62fc\u97f3\ndengmingjie\n\ncat 25189100283.txt            # \u9a8c\u8bc1\u5199\u5165\u7ed3\u679c\n<\/code><\/pre>\n<h4>\uff083\uff09\u67e5\u770b\u8be6\u7ec6\u5217\u8868\u5e76\u89e3\u8bfb\u6743\u9650<\/h4>\n<pre><code class=\"language-bash line-numbers\">ls -l 25189100283.txt\n<\/code><\/pre>\n<p>\u5b9e\u6d4b\u8f93\u51fa\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">-rw-rw-r-- 1 cloverdayssss cloverdayssss 12  9\u6708 17 21:34 25189100283.txt\n<\/code><\/pre>\n<p><strong>\u6743\u9650\u89e3\u8bfb<\/strong>\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u5b57\u6bb5<\/th>\n<th align=\"left\">\u503c<\/th>\n<th align=\"left\">\u542b\u4e49<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">\u6587\u4ef6\u7c7b\u578b<\/td>\n<td align=\"left\"><code>-<\/code><\/td>\n<td align=\"left\">\u666e\u901a\u6587\u4ef6\uff08<code>d<\/code> \u4e3a\u76ee\u5f55\u3001<code>l<\/code> \u4e3a\u7b26\u53f7\u94fe\u63a5\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5c5e\u4e3b\u6743\u9650<\/td>\n<td align=\"left\"><code>rw-<\/code><\/td>\n<td align=\"left\">\u5c5e\u4e3b\u53ef\u8bfb\u3001\u53ef\u5199\u3001\u4e0d\u53ef\u6267\u884c<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5c5e\u7ec4\u6743\u9650<\/td>\n<td align=\"left\"><code>rw-<\/code><\/td>\n<td align=\"left\">\u5c5e\u7ec4\u53ef\u8bfb\u3001\u53ef\u5199\uff08Ubuntu \u7528\u6237\u79c1\u6709\u7ec4\u9ed8\u8ba4 umask \u4e3a 002\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5176\u4ed6\u7528\u6237\u6743\u9650<\/td>\n<td align=\"left\"><code>r--<\/code><\/td>\n<td align=\"left\">\u5176\u4ed6\u7528\u6237\u4ec5\u53ef\u8bfb<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u786c\u94fe\u63a5\u6570<\/td>\n<td align=\"left\"><code>1<\/code><\/td>\n<td align=\"left\">\u6307\u5411\u8be5 inode \u7684\u94fe\u63a5\u6570\u91cf<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5c5e\u4e3b \/ \u5c5e\u7ec4<\/td>\n<td align=\"left\"><code>cloverdayssss cloverdayssss<\/code><\/td>\n<td align=\"left\">\u6587\u4ef6\u6240\u6709\u8005\u53ca\u5176\u6240\u5c5e\u7ec4<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5927\u5c0f<\/td>\n<td align=\"left\"><code>12<\/code><\/td>\n<td align=\"left\">\u6587\u4ef6\u5b57\u8282\u6570<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\uff084\uff09\u67e5\u770b\u5185\u5bb9\u4e0e\u7edf\u8ba1\u5b57\u7b26\u6570<\/h4>\n<pre><code class=\"language-bash line-numbers\">cat 25189100283.txt\nwc -c 25189100283.txt\nwc -l -m 25189100283.txt\n<\/code><\/pre>\n<p>\u5b9e\u6d4b\u8f93\u51fa\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">dengmingjie\n12 25189100283.txt        \u2190 \u5b57\u8282\u6570\uff08wc -c\uff09\n1 12 25189100283.txt      \u2190 \u884c\u6570\u3001\u5b57\u7b26\u6570\uff08wc -l -m\uff09\n<\/code><\/pre>\n<blockquote><p>\n  \u8bf4\u660e\uff1a\u5185\u5bb9 <code>dengmingjie\\n<\/code> \u5171 12 \u4e2a\u5b57\u7b26\uff0811 \u4e2a\u5b57\u6bcd + 1 \u4e2a\u6362\u884c\u7b26\uff09\uff0c\u56e0\u5168\u90e8\u4e3a ASCII \u5b57\u7b26\uff0c\u5b57\u8282\u6570\u4e0e\u5b57\u7b26\u6570\u76f8\u540c\u3002\n<\/p><\/blockquote>\n<h4>\uff085\uff09\u538b\u7f29\u3001\u5220\u9664\u3001\u590d\u5236\u3001\u6539\u5c5e\u4e3b\u3001\u6539\u6743\u9650<\/h4>\n<pre><code class=\"language-bash line-numbers\">gzip -k 25189100283.txt      # -k \u4fdd\u7559\u539f\u6587\u4ef6\nls                           # \u53ef\u89c1\u65b0\u751f\u6210\u7684 25189100283.txt.gz\nrm -f 25189100283.txt.gz     # \u5220\u9664\u538b\u7f29\u6587\u4ef6\nls                           # \u786e\u8ba4\u5df2\u5220\u9664\ncp 25189100283.txt \/tmp\/     # \u590d\u5236\u5230 \/tmp \u76ee\u5f55\nls \/tmp                      # \u786e\u8ba4\u590d\u5236\u6210\u529f\n<\/code><\/pre>\n<pre><code class=\"language-bash line-numbers\">sudo chown root:root 25189100283.txt    # \u5c06\u5c5e\u4e3b\u6539\u4e3a root\nls -l 25189100283.txt\nsudo chmod 777 25189100283.txt          # \u5c06\u6743\u9650\u6539\u4e3a 777\nls -l 25189100283.txt\n<\/code><\/pre>\n<p>\u5b9e\u6d4b\u8f93\u51fa\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">-rw-rw-r-- 1 root root 12  9\u6708 17 21:34 25189100283.txt   \u2190 \u6539\u5c5e\u4e3b\u540e\n-rwxrwxrwx 1 root root 12  9\u6708 17 21:34 25189100283.txt   \u2190 \u6539\u6743\u9650\u540e\n<\/code><\/pre>\n<blockquote><p>\n  \u6ce8\u610f\uff1a<code>gzip<\/code> \u4e0d\u52a0 <code>-k<\/code> \u4f1a\u5220\u9664\u539f\u6587\u4ef6\uff0c\u540e\u7eed\u6b65\u9aa4\u5c06\u65e0\u6cd5\u7ee7\u7eed\u3002\n<\/p><\/blockquote>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/14-file-ops.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 14\u3000\u6587\u4ef6\u521b\u5efa\u3001\u5185\u5bb9\u5199\u5165\u3001\u6743\u9650\u67e5\u770b\u3001\u5b57\u7b26\u7edf\u8ba1\u3001\u538b\u7f29\u4e0e\u5220\u9664\u3001\u590d\u5236\u5168\u8fc7\u7a0b\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/14-file-ops.jpg\" alt=\"\u56fe 14\u3000\u6587\u4ef6\u521b\u5efa\u3001\u5185\u5bb9\u5199\u5165\u3001\u6743\u9650\u67e5\u770b\u3001\u5b57\u7b26\u7edf\u8ba1\u3001\u538b\u7f29\u4e0e\u5220\u9664\u3001\u590d\u5236\u5168\u8fc7\u7a0b\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 14\u3000\u6587\u4ef6\u521b\u5efa\u3001\u5185\u5bb9\u5199\u5165\u3001\u6743\u9650\u67e5\u770b\u3001\u5b57\u7b26\u7edf\u8ba1\u3001\u538b\u7f29\u3001\u5220\u9664\u4e0e\u590d\u5236\u5168\u8fc7\u7a0b<\/strong><\/p>\n<h4>\uff086\uff09\u641c\u7d22\u7cfb\u7edf\u4e2d\u7684\u9690\u85cf\u6587\u4ef6<\/h4>\n<pre><code class=\"language-bash line-numbers\">ls -la\nfind \/ -name \".*\" -type f 2&gt;\/dev\/null | head -15\n<\/code><\/pre>\n<p>\u5b9e\u6d4b\u8f93\u51fa\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">-rw-r--r--  1 cloverdayssss cloverdayssss 3771  3\u6708 31  2024 .bashrc\n-rw-r--r--  1 cloverdayssss cloverdayssss  807  3\u6708 31  2024 .profile\ndrwx------ 12 cloverdayssss cloverdayssss 4096  9\u6708 17 14:23 .config\n\n\/home\/cloverdayssss\/.config\/.gsd-keyboard.settings-ported\n\/home\/cloverdayssss\/.bash_logout\n\/home\/cloverdayssss\/.profile\n\/home\/cloverdayssss\/.bashrc\n\/home\/cloverdayssss\/.sudo_as_admin_successful\n\/home\/cloverdayssss\/.bash_history\n\/tmp\/.X1025-lock\n\/tmp\/.X1-lock\n\/tmp\/.X0-lock\n\/etc\/.updated\n\/etc\/.pwd.lock\n<\/code><\/pre>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/15-owner-perm.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 15\u3000\u5c5e\u4e3b\/\u6743\u9650\u4fee\u6539\u4e0e\u9690\u85cf\u6587\u4ef6\u641c\u7d22\uff08ls -la \u4e0e find\uff09\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/15-owner-perm.jpg\" alt=\"\u56fe 15\u3000\u5c5e\u4e3b\/\u6743\u9650\u4fee\u6539\u4e0e\u9690\u85cf\u6587\u4ef6\u641c\u7d22\uff08ls -la \u4e0e find\uff09\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 15\u3000\u5c5e\u4e3b\/\u6743\u9650\u4fee\u6539\u4e0e\u9690\u85cf\u6587\u4ef6\u641c\u7d22\uff08ls -la \u4e0e find\uff09<\/strong><\/p>\n<h3>3.6 \/etc\/passwd \u6587\u4ef6\u591a\u7ef4\u5ea6\u89e3\u8bfb<\/h3>\n<h4>\uff081\uff09\u6587\u4ef6\u5c5e\u6027\u4e0e\u7ed3\u6784<\/h4>\n<pre><code class=\"language-bash line-numbers\">ls -l \/etc\/passwd\nwc -l \/etc\/passwd\nhead -3 \/etc\/passwd\n<\/code><\/pre>\n<p>\u5b9e\u6d4b\u8f93\u51fa\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">-rw-r--r-- 1 root root 2931  9\u6708 17 20:44 \/etc\/passwd\n50 \/etc\/passwd\n\nroot:x:0:0:root:\/root:\/bin\/bash\ndaemon:x:1:1:daemon:\/usr\/sbin:\/usr\/sbin\/nologin\nbin:x:2:2:bin:\/bin:\/usr\/sbin\/nologin\n<\/code><\/pre>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/16-passwd.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 16\u3000\/etc\/passwd \u6587\u4ef6\u5c5e\u6027\u3001\u884c\u6570\u4e0e\u5185\u5bb9\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/16-passwd.jpg\" alt=\"\u56fe 16\u3000\/etc\/passwd \u6587\u4ef6\u5c5e\u6027\u3001\u884c\u6570\u4e0e\u5185\u5bb9\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 16\u3000\/etc\/passwd \u6587\u4ef6\u5c5e\u6027\u3001\u884c\u6570\u4e0e\u5185\u5bb9<\/strong><\/p>\n<p><code>\/etc\/passwd<\/code> \u5c5e\u4e3b\u4e3a root\uff0c\u6743\u9650 644\uff0c\u5373\u6240\u6709\u7528\u6237\u53ef\u8bfb\u3001\u4ec5 root \u53ef\u5199\u2014\u2014\u8fd9\u662f\u5fc5\u8981\u7684\uff0c\u56e0\u4e3a\u767b\u5f55\u3001<code>ls -l<\/code> \u7b49\u64cd\u4f5c\u90fd\u9700\u8bfb\u53d6\u7528\u6237\u4fe1\u606f\uff0c\u800c\u5199\u5165\u88ab\u4e25\u683c\u9650\u5236\u4ee5\u9632\u6b62\u63d0\u6743\u3002<\/p>\n<h4>\uff082\uff09\u5b57\u6bb5\u542b\u4e49\uff08\u4ee5 root \u884c\u4e3a\u4f8b\uff09<\/h4>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u5e8f\u53f7<\/th>\n<th align=\"left\">\u5b57\u6bb5<\/th>\n<th align=\"left\">\u542b\u4e49<\/th>\n<th align=\"left\">\u793a\u4f8b\u89e3\u6790<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">1<\/td>\n<td align=\"left\">\u7528\u6237\u540d<\/td>\n<td align=\"left\">\u767b\u5f55\u8d26\u53f7\u540d<\/td>\n<td align=\"left\"><code>root<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">2<\/td>\n<td align=\"left\">\u5bc6\u7801\u5360\u4f4d\u7b26<\/td>\n<td align=\"left\"><code>x<\/code> \u8868\u793a\u5bc6\u7801\u5df2\u7531 \/etc\/shadow \u6258\u7ba1<\/td>\n<td align=\"left\"><code>x<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">3<\/td>\n<td align=\"left\">UID<\/td>\n<td align=\"left\">\u7528\u6237\u6807\u8bc6\u53f7\uff0c0 \u4e3a\u8d85\u7ea7\u7528\u6237<\/td>\n<td align=\"left\"><code>0<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">4<\/td>\n<td align=\"left\">GID<\/td>\n<td align=\"left\">\u4e3b\u7ec4\u6807\u8bc6\u53f7<\/td>\n<td align=\"left\"><code>0<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">5<\/td>\n<td align=\"left\">\u6ce8\u91ca\/\u63cf\u8ff0<\/td>\n<td align=\"left\">\u7528\u6237\u5168\u540d\u7b49\u4fe1\u606f\uff08GECOS\uff09<\/td>\n<td align=\"left\"><code>root<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">6<\/td>\n<td align=\"left\">\u5bb6\u76ee\u5f55<\/td>\n<td align=\"left\">\u7528\u6237\u767b\u5f55\u540e\u7684\u8d77\u59cb\u76ee\u5f55<\/td>\n<td align=\"left\"><code>\/root<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">7<\/td>\n<td align=\"left\">\u767b\u5f55 Shell<\/td>\n<td align=\"left\">\u767b\u5f55\u65f6\u6267\u884c\u7684 Shell\uff1b<code>nologin<\/code> \u8868\u793a\u7981\u6b62\u767b\u5f55<\/td>\n<td align=\"left\"><code>\/bin\/bash<\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\uff083\uff09\u7edf\u8ba1\u4e0e\u7b5b\u9009<\/h4>\n<pre><code class=\"language-bash line-numbers\">wc -l \/etc\/passwd\ncut -d: -f1 \/etc\/passwd\nawk -F: '<span class=\"katex math inline\">3&gt;=1000 &amp;&amp;<\/span>3&lt;65534 {print <span class=\"katex math inline\">1,<\/span>3}' \/etc\/passwd\nawk -F: '<span class=\"katex math inline\">3==0 {print<\/span>1}' \/etc\/passwd\ngrep -v \"nologin\\|false\" \/etc\/passwd | cut -d: -f1\n<\/code><\/pre>\n<p>\u5b9e\u6d4b\u8f93\u51fa\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">50 \/etc\/passwd                    \u2190 \u5171 50 \u4e2a\u8d26\u6237\n\n\u666e\u901a\u7528\u6237\uff08UID&gt;=1000\uff09\uff1a\n  cloverdayssss  UID=1000\n\nUID=0 \u7684\u8d26\u6237\uff1a\n  root\n\n\u53ef\u767b\u5f55\u7528\u6237\uff08shell \u975e nologin\/false\uff09\uff1a\nroot sync cloverdayssss\n<\/code><\/pre>\n<h4>\uff084\uff09\u5b89\u5168\u89c6\u89d2\u89e3\u8bfb<\/h4>\n<ul>\n<li><strong>UID \u4e3a 0 \u7684\u8d26\u6237\u5373\u4e3a\u8d85\u7ea7\u7528\u6237<\/strong>\u3002\u5b9e\u6d4b\u4ec5 <code>root<\/code> \u4e00\u4e2a\uff0c\u5c5e\u6b63\u5e38\u72b6\u6001\uff1b\u82e5\u51fa\u73b0 root \u4e4b\u5916\u7684 UID=0 \u8d26\u6237\uff0c\u901a\u5e38\u610f\u5473\u7740\u653b\u51fb\u8005\u7559\u4e0b\u7684\u540e\u95e8\u8d26\u6237\uff1b<\/li>\n<li><strong>\u7a7a\u5bc6\u7801\u5b57\u6bb5<\/strong>\uff08\u7b2c 2 \u5b57\u6bb5\u4e3a\u7a7a\uff09\u8868\u793a\u8be5\u8d26\u6237\u65e0\u9700\u5bc6\u7801\u5373\u53ef\u767b\u5f55\uff0c\u5c5e\u9ad8\u5371\u914d\u7f6e\uff1b<\/li>\n<li><strong>Shell \u4e3a <code>\/bin\/bash<\/code> \u7684\u670d\u52a1\u8d26\u6237<\/strong>\u540c\u6837\u53ef\u88ab\u7528\u4e8e\u767b\u5f55\u3002\u5b9e\u6d4b\u53ef\u767b\u5f55\u8d26\u6237\u4e3a <code>root<\/code>\u3001<code>sync<\/code>\u3001<code>cloverdayssss<\/code> \u4e09\u4e2a\uff0c\u5176\u4e2d <code>sync<\/code> \u4e3a\u7cfb\u7edf\u8d26\u6237\uff0c\u5176 shell \u4e3a <code>\/bin\/sync<\/code>\uff0c\u5e76\u975e\u4ea4\u4e92\u5f0f shell\uff1b<\/li>\n<li>\u666e\u901a\u7528\u6237 UID \u81ea 1000 \u8d77\u7f16\u53f7\uff0c\u53ef\u901a\u8fc7 UID \u8303\u56f4\u5feb\u901f\u533a\u5206\u7cfb\u7edf\u8d26\u6237\u4e0e\u4eba\u4e3a\u521b\u5efa\u8d26\u6237\uff08\u672c\u673a 50 \u4e2a\u8d26\u6237\u4e2d\u4ec5 1 \u4e2a\u4e3a\u666e\u901a\u7528\u6237\uff09\u3002<\/li>\n<\/ul>\n<p>\u56e0\u6b64 <code>\/etc\/passwd<\/code> \u662f\u4e3b\u673a\u5b89\u5168\u68c0\u67e5\u4e0e\u5e94\u6025\u54cd\u5e94\u4e2d\u5fc5\u67e5\u7684\u6587\u4ef6\u4e4b\u4e00\u3002<\/p>\n<h2>\u56db\u3001\u5b9e\u9a8c\u6570\u636e\u8bb0\u5f55<\/h2>\n<h3>\u8868 1\u3000\u865a\u62df\u673a\u7f51\u7edc\u914d\u7f6e\u4e0e\u8fde\u901a\u6027\u9a8c\u8bc1\u7ed3\u679c<\/h3>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u5e8f\u53f7<\/th>\n<th align=\"left\">\u6e90\u4e3b\u673a<\/th>\n<th align=\"left\">\u76ee\u6807<\/th>\n<th align=\"left\">\u547d\u4ee4<\/th>\n<th align=\"left\">\u7ed3\u679c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">1<\/td>\n<td align=\"left\">Kali 192.168.116.128<\/td>\n<td align=\"left\">\u8df3\u677f\u673a 192.168.116.129<\/td>\n<td align=\"left\"><code>ping -c 3<\/code><\/td>\n<td align=\"left\">\u901a\uff0cmin\/avg\/max = 0.495\/0.745\/0.931 ms<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">2<\/td>\n<td align=\"left\">\u9776\u673a 192.168.113.129<\/td>\n<td align=\"left\">\u8df3\u677f\u673a 192.168.113.128<\/td>\n<td align=\"left\"><code>ping -c 2<\/code><\/td>\n<td align=\"left\">\u901a\uff0c\u540c\u7f51\u6bb5<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">3<\/td>\n<td align=\"left\">Kali 192.168.116.128<\/td>\n<td align=\"left\">\u9776\u673a 192.168.113.129<\/td>\n<td align=\"left\"><code>ping -c 3<\/code><\/td>\n<td align=\"left\">\u901a\uff0c\u7ecf\u8df3\u677f\u673a\u8f6c\u53d1\uff0cmin\/avg\/max = 0.788\/1.750\/2.619 ms<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">4<\/td>\n<td align=\"left\">Kali 192.168.116.128<\/td>\n<td align=\"left\">192.168.113.129<\/td>\n<td align=\"left\"><code>traceroute<\/code><\/td>\n<td align=\"left\">\u7b2c\u4e00\u8df3 192.168.116.129\uff0c\u7b2c\u4e8c\u8df3 192.168.113.129<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">5<\/td>\n<td align=\"left\">\u9776\u673a 192.168.113.129<\/td>\n<td align=\"left\">223.5.5.5<\/td>\n<td align=\"left\"><code>ping -c 2<\/code><\/td>\n<td align=\"left\">\u4e0d\u901a\uff0c<code>\u7f51\u7edc\u4e0d\u53ef\u8fbe<\/code>\uff08Host-only \u9694\u79bb\u751f\u6548\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">6<\/td>\n<td align=\"left\">\u8df3\u677f\u673a 192.168.116.129<\/td>\n<td align=\"left\">mirrors.tuna.tsinghua.edu.cn<\/td>\n<td align=\"left\"><code>apt update<\/code><\/td>\n<td align=\"left\">\u6210\u529f\uff0c\u56db\u4e2a\u4ed3\u5e93\u7d22\u5f15\u5168\u90e8\u547d\u4e2d\u6e05\u534e\u6e90\uff0c\u65e0 404 \/ GPG \u62a5\u9519<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>\u8868 2\u3000\u6587\u4ef6\u7cfb\u7edf\u57fa\u672c\u547d\u4ee4\u64cd\u4f5c\u8bb0\u5f55<\/h3>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u64cd\u4f5c<\/th>\n<th align=\"left\">\u547d\u4ee4<\/th>\n<th align=\"left\">\u7ed3\u679c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">\u65b0\u5efa\u5b66\u53f7\u6587\u4ef6<\/td>\n<td align=\"left\"><code>touch 25189100283.txt<\/code><\/td>\n<td align=\"left\">\u521b\u5efa\u6210\u529f\uff0c0 \u5b57\u8282<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5199\u5165\u59d3\u540d\u62fc\u97f3<\/td>\n<td align=\"left\"><code>cat &gt; 25189100283.txt<\/code> \u8f93\u5165 <code>dengmingjie<\/code><\/td>\n<td align=\"left\">12 \u5b57\u8282<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u67e5\u770b\u6743\u9650<\/td>\n<td align=\"left\"><code>ls -l 25189100283.txt<\/code><\/td>\n<td align=\"left\"><code>-rw-rw-r-- 1 cloverdayssss cloverdayssss 12<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u67e5\u770b\u5185\u5bb9<\/td>\n<td align=\"left\"><code>cat 25189100283.txt<\/code><\/td>\n<td align=\"left\"><code>dengmingjie<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u7edf\u8ba1\u5b57\u7b26<\/td>\n<td align=\"left\"><code>wc -c<\/code> \/ <code>wc -l -m<\/code><\/td>\n<td align=\"left\">12 \/ 1 12<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u538b\u7f29<\/td>\n<td align=\"left\"><code>gzip -k 25189100283.txt<\/code><\/td>\n<td align=\"left\">\u751f\u6210 <code>25189100283.txt.gz<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u5220\u9664\u538b\u7f29\u5305<\/td>\n<td align=\"left\"><code>rm -f 25189100283.txt.gz<\/code><\/td>\n<td align=\"left\">\u5220\u9664\u6210\u529f<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u590d\u5236\u5230 \/tmp<\/td>\n<td align=\"left\"><code>cp 25189100283.txt \/tmp\/<\/code><\/td>\n<td align=\"left\">\u6210\u529f<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u6539\u5c5e\u4e3b<\/td>\n<td align=\"left\"><code>chown root:root<\/code><\/td>\n<td align=\"left\"><code>-rw-rw-r-- 1 root root<\/code><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u6539\u6743\u9650<\/td>\n<td align=\"left\"><code>chmod 777<\/code><\/td>\n<td align=\"left\"><code>-rwxrwxrwx 1 root root<\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>\u8868 3\u3000\u8f6f\u4ef6\u6e90\u4fee\u6539\u524d\u540e\u5bf9\u6bd4<\/h3>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u9636\u6bb5<\/th>\n<th align=\"left\">\u6e90\u5730\u5740<\/th>\n<th align=\"left\">\u7ed3\u679c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">\u4fee\u6539\u524d<\/td>\n<td align=\"left\"><code>http:\/\/sg.archive.ubuntu.com\/ubuntu<\/code>\uff08\u5883\u5916\u8282\u70b9\uff09<\/td>\n<td align=\"left\"><code>apt update<\/code> \u8017\u65f6\u957f\uff0c\u4e0b\u8f7d\u901f\u7387\u4f4e<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u6b8b\u7559\u6e90<\/td>\n<td align=\"left\"><code>file:\/\/\/cdrom noble<\/code><\/td>\n<td align=\"left\">\u62a5\u9519\u300c\u4e0d\u518d\u542b\u6709 Release \u6587\u4ef6\u300d\uff0c\u5bfc\u81f4 update \u6574\u4f53\u5931\u8d25<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u4fee\u6539\u540e<\/td>\n<td align=\"left\"><code>https:\/\/mirrors.tuna.tsinghua.edu.cn\/ubuntu<\/code><\/td>\n<td align=\"left\">\u56db\u4e2a\u4ed3\u5e93\u7d22\u5f15\u5168\u90e8\u547d\u4e2d\uff0c\u83b7\u53d6\u6b63\u5e38\uff08\u89c1\u56fe 9\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e94\u3001\u5b9e\u9a8c\u7ed3\u679c\u5206\u6790\u53ca\u56de\u7b54\u95ee\u9898<\/h2>\n<h3>5.1 \u5b9e\u9a8c\u8fc7\u7a0b\u4e2d\u9047\u5230\u7684\u95ee\u9898\u4e0e\u6392\u67e5<\/h3>\n<h4>\u95ee\u9898\u4e00\uff1aapt update \u62a5\u9519\u9000\u51fa\uff0copen-vm-tools \u672a\u80fd\u5b89\u88c5<\/h4>\n<p><strong>\u73b0\u8c61<\/strong>\uff1a\u6267\u884c <code>sudo apt update &amp;&amp; sudo apt install open-vm-tools -y<\/code> \u65f6\uff0c\u547d\u4ee4\u5728 update \u9636\u6bb5\u5373\u62a5\u9519\u7ec8\u6b62\uff0c<code>&amp;&amp;<\/code> \u4e4b\u540e\u7684\u5b89\u88c5\u6b65\u9aa4\u5b8c\u5168\u672a\u6267\u884c\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">E: \u4ed3\u5e93 \"file:\/cdrom noble Release\" \u4e0d\u518d\u542b\u6709 Release \u6587\u4ef6\u3002\nN: \u65e0\u6cd5\u5b89\u5168\u5730\u7528\u8be5\u6e90\u8fdb\u884c\u66f4\u65b0\uff0c\u6240\u4ee5\u9ed8\u8ba4\u7981\u7528\u8be5\u6e90\u3002\n<\/code><\/pre>\n<p><strong>\u539f\u56e0\u5206\u6790<\/strong>\uff1a\u7cfb\u7edf\u5b89\u88c5\u65f6\u66fe\u5c06\u5b89\u88c5\u5149\u76d8\u4f5c\u4e3a\u672c\u5730\u6e90\u5199\u5165\u914d\u7f6e\uff08\u6307\u5411 <code>file:\/cdrom<\/code>\uff09\u3002\u7cfb\u7edf\u5b89\u88c5\u5b8c\u6210\u540e <code>\/cdrom<\/code> \u5df2\u4e0d\u518d\u6302\u8f7d\uff0c\u8be5\u8def\u5f84\u4e0b\u4e0d\u5b58\u5728 <code>dists\/noble\/Release<\/code> \u7d22\u5f15\u6587\u4ef6\uff0cAPT \u56e0\u65e0\u6cd5\u9a8c\u8bc1\u8be5\u6e90\u800c\u62a5\u9519\u3002\u7531\u4e8e\u547d\u4ee4\u4f7f\u7528 <code>&amp;&amp;<\/code> \u4e32\u8054\uff0c\u524d\u4e00\u6761\u5931\u8d25\u5bfc\u81f4\u540e\u7eed\u5b89\u88c5\u88ab\u8df3\u8fc7\u3002<\/p>\n<p><strong>\u89e3\u51b3<\/strong>\uff1a\u5b9a\u4f4d\u5e76\u6ce8\u91ca\u6389\u8be5\u6761\u6e90\u540e\u91cd\u65b0\u6267\u884c\uff0c\u95ee\u9898\u89e3\u51b3\u3002<\/p>\n<pre><code class=\"language-bash line-numbers\">grep -rn 'cdrom' \/etc\/apt\/sources.list \/etc\/apt\/sources.list.d\/\nsudo sed -i.bak '\/cdrom\/s\/^\/#\/' \/etc\/apt\/sources.list\n<\/code><\/pre>\n<p><strong>\u7ecf\u9a8c\u603b\u7ed3<\/strong>\uff1a\u6392\u67e5 apt \u6545\u969c\u65f6\u5e94\u5148\u5355\u72ec\u6267\u884c <code>apt update<\/code> \u89c2\u5bdf\u5b8c\u6574\u62a5\u9519\uff0c\u518d\u6267\u884c\u5b89\u88c5\uff1b\u4f7f\u7528 <code>&amp;&amp;<\/code> \u4e32\u8054\u547d\u4ee4\u65f6\uff0c\u524d\u7f6e\u5931\u8d25\u4f1a\u9759\u9ed8\u8df3\u8fc7\u540e\u7eed\u6b65\u9aa4\uff0c\u5bb9\u6613\u8bef\u5224\u4e3a\u300c\u5b89\u88c5\u6210\u529f\u300d\u3002<\/p>\n<h4>\u95ee\u9898\u4e8c\uff1aDNS \u89e3\u6790\u5931\u8d25\u5bfc\u81f4 apt \u65e0\u6cd5\u5de5\u4f5c<\/h4>\n<p><strong>\u73b0\u8c61<\/strong>\uff1a\u4fee\u6539\u6e90\u6587\u4ef6\u540e <code>apt update<\/code> \u4ecd\u7136\u5931\u8d25\uff0c<code>nslookup<\/code> \u62a5 <code>SERVFAIL<\/code>\uff0c\u4f46\u76f4\u63a5 ping \u516c\u7f51 IP\uff08223.5.5.5\uff09\u5374\u53ef\u4ee5\u901a\u3002<\/p>\n<p><strong>\u6392\u67e5\u8fc7\u7a0b<\/strong>\uff1a<\/p>\n<pre><code class=\"language-bash line-numbers\">resolvectl status            # \u663e\u793a Link ens33 \u7684 Current Scopes: none\nnslookup mirrors.tuna.tsinghua.edu.cn 223.5.5.5   # \u6307\u5b9a DNS \u670d\u52a1\u5668\u5219\u89e3\u6790\u6210\u529f\n<\/code><\/pre>\n<p><strong>\u539f\u56e0\u5206\u6790<\/strong>\uff1aNetworkManager \u867d\u5df2\u901a\u8fc7 DHCP \u83b7\u5f97\u7f51\u7edc\u914d\u7f6e\uff0c\u4f46\u672a\u5411 <code>systemd-resolved<\/code> \u6ce8\u518c DNS \u670d\u52a1\u5668\uff08<code>Current Scopes: none<\/code>\uff09\uff0c\u5bfc\u81f4\u672c\u5730 stub \u89e3\u6790\u5668\uff08127.0.0.53\uff09\u65e0\u53ef\u7528\u4e0a\u6e38\u3002\u56e0\u6b64\u300c\u80fd ping \u901a IP \u4f46\u65e0\u6cd5\u89e3\u6790\u57df\u540d\u300d\u3002<\/p>\n<p><strong>\u89e3\u51b3<\/strong>\uff1a\u901a\u8fc7 nmcli \u663e\u5f0f\u6307\u5b9a DNS \u5e76\u4ee4\u5176\u5ffd\u7565 DHCP \u4e0b\u53d1\u7684 DNS\uff1a<\/p>\n<pre><code class=\"language-bash line-numbers\">CON=<span class=\"katex math inline\">(nmcli -t -f NAME,DEVICE con show --active | awk -F: '<\/span>2==\"ens33\"{print <span class=\"katex math inline\">1; exit}')\nsudo nmcli con mod \"<\/span>CON\" ipv4.dns \"223.5.5.5,114.114.114.114\" ipv4.ignore-auto-dns yes\nsudo nmcli con up \"$CON\"\n<\/code><\/pre>\n<p>\u4fee\u590d\u540e <code>resolvectl status<\/code> \u663e\u793a <code>Current Scopes: DNS<\/code>\u3001<code>Current DNS Server: 223.5.5.5<\/code>\uff0c\u89e3\u6790\u6062\u590d\u6b63\u5e38\u3002<\/p>\n<p><strong>\u7ecf\u9a8c\u603b\u7ed3<\/strong>\uff1aLinux \u7f51\u7edc\u6545\u969c\u6392\u67e5\u5e94\u5206\u5c42\u8fdb\u884c\u2014\u2014\u5148\u9a8c\u8bc1\u94fe\u8def\uff08ping IP\uff09\uff0c\u518d\u9a8c\u8bc1 DNS \u89e3\u6790\uff08nslookup\uff09\uff0c\u6700\u540e\u9a8c\u8bc1\u5e94\u7528\u5c42\uff08apt update\uff09\u3002\u82e5 ping IP \u901a\u800c\u57df\u540d\u4e0d\u901a\uff0c\u95ee\u9898\u4e00\u5b9a\u5728 DNS \u73af\u8282\u3002<\/p>\n<h4>\u95ee\u9898\u4e09\uff1a\u8de8\u7f51\u6bb5\u6d41\u91cf\u65e0 NAT \u89c4\u5219\uff0c\u5185\u7f51\u65e0\u6cd5\u51fa\u7f51<\/h4>\n<p><strong>\u73b0\u8c61<\/strong>\uff1a\u4e3a\u9776\u673a\u6dfb\u52a0\u9ed8\u8ba4\u8def\u7531\u540e\uff0c\u9776\u673a\u4ecd\u65e0\u6cd5\u8bbf\u95ee\u4e92\u8054\u7f51\u3002<\/p>\n<p><strong>\u539f\u56e0\u5206\u6790<\/strong>\uff1a\u8df3\u677f\u673a\u867d\u5df2\u5f00\u542f <code>ip_forward<\/code>\uff0c\u4f46 <code>iptables<\/code> \u7684 <code>POSTROUTING<\/code> \u94fe\u4e2d\u6ca1\u6709\u5730\u5740\u8f6c\u6362\u89c4\u5219\u3002\u9776\u673a\u7684\u6570\u636e\u5305\u867d\u7136\u80fd\u88ab\u8f6c\u53d1\u5230 NAT \u7f51\u6bb5\uff0c\u4f46\u6e90\u5730\u5740\u4ecd\u662f <code>192.168.113.129<\/code>\uff08\u79c1\u6709\u5185\u7f51\u5730\u5740\uff09\uff0cVMware \u7684 NAT \u8bbe\u5907\u65e0\u6cd5\u4e3a\u5176\u8def\u7531\u56de\u5305\uff0c\u56e0\u6b64\u5fc5\u987b\u505a\u6e90\u5730\u5740\u8f6c\u6362\uff08MASQUERADE\uff09\u3002<\/p>\n<p><strong>\u89e3\u51b3<\/strong>\uff1a<\/p>\n<pre><code class=\"language-bash line-numbers\">sudo iptables -t nat -A POSTROUTING -s 192.168.113.0\/24 -o ens33 -j MASQUERADE\n<\/code><\/pre>\n<p>\u6dfb\u52a0\u540e\u9776\u673a\u53ef\u6b63\u5e38\u8bbf\u95ee\u4e92\u8054\u7f51\uff08\u5b9e\u6d4b\u65f6\u5ef6 26.8 ms\uff09\u3002<\/p>\n<p><strong>\u7ecf\u9a8c\u603b\u7ed3<\/strong>\uff1a\u8f6c\u53d1\uff08<code>ip_forward<\/code>\uff09\u4e0e\u5730\u5740\u8f6c\u6362\uff08<code>MASQUERADE<\/code>\uff09\u662f\u4e24\u4e2a\u72ec\u7acb\u73af\u8282\uff0c\u524d\u8005\u8d1f\u8d23\u300c\u8ba9\u5305\u901a\u8fc7\u300d\uff0c\u540e\u8005\u8d1f\u8d23\u300c\u8ba9\u56de\u5305\u80fd\u627e\u5230\u6e90\u300d\u3002\u505a\u8de8\u7f51\u6bb5\u7f51\u5173\u65f6\u4e24\u8005\u7f3a\u4e00\u4e0d\u53ef\u3002<\/p>\n<h3>5.2 \u7ed3\u679c\u5206\u6790<\/h3>\n<p><strong>\uff081\uff09\u7f51\u7edc\u5c42\u9762<\/strong>\uff1a\u540c\u7f51\u6bb5\uff08Kali\u2013\u8df3\u677f\u673a\u3001\u8df3\u677f\u673a\u2013\u9776\u673a\uff09\u4e8c\u5c42\u76f4\u901a\uff1b\u8de8\u7f51\u6bb5\uff08Kali\u2013\u9776\u673a\uff09\u9700\u8df3\u677f\u673a\u5f00\u542f <code>ip_forward<\/code> \u5e76\u5177\u5907\u53cc\u7f51\u5361\u540e\u53ef\u8fbe\u3002<code>traceroute<\/code> \u7ed3\u679c\u6e05\u6670\u5370\u8bc1\u4e86\u4e24\u5c42\u7ed3\u6784\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">traceroute to 192.168.113.129, 5 hops max, 60 byte packets\n 1  192.168.116.129  0.730 ms  0.653 ms  0.613 ms   \u2190 \u8df3\u677f\u673a\uff08\u8fb9\u754c\u7f51\u6bb5\uff09\n 2  192.168.113.129  1.470 ms  1.453 ms  1.120 ms   \u2190 \u9776\u673a\uff08\u5185\u7f51\u7f51\u6bb5\uff09\n<\/code><\/pre>\n<p>\u6d41\u91cf\u786e\u5b9e\u7ecf\u8fc7\u8df3\u677f\u673a\u4e2d\u8f6c\uff0c\u800c\u975e\u76f4\u8fbe\uff0c\u8bf4\u660e\u300c\u653b\u51fb\u673a\u2014\u8df3\u677f\u2014\u9776\u673a\u300d\u7684\u9694\u79bb\u7ed3\u6784\u6210\u7acb\u3002\u9776\u673a\u4f4d\u4e8e Host-only \u7f51\u6bb5\uff0c\u5b9e\u6d4b <code>ping 223.5.5.5<\/code> \u8fd4\u56de <code>\u7f51\u7edc\u4e0d\u53ef\u8fbe<\/code>\uff0c\u4e0e\u8bbe\u8ba1\u9884\u671f\u4e00\u81f4\u3002<\/p>\n<p><strong>\uff082\uff09\u8f6f\u4ef6\u6e90\u5c42\u9762<\/strong>\uff1a\u66ff\u6362\u4e3a\u6e05\u534e\u955c\u50cf\u6e90\u540e\uff0c<code>apt update<\/code> \u7684\u56db\u4e2a\u4ed3\u5e93\u7d22\u5f15\u5168\u90e8\u547d\u4e2d\uff08\u89c1\u56fe 9\uff09\uff0c\u5b89\u88c5 <code>open-vm-tools<\/code> \u65e0\u4f9d\u8d56\u9519\u8bef\uff0c\u8bf4\u660e\u6e90\u66ff\u6362\u751f\u6548\u4e14\u7248\u672c\u4ee3\u53f7\uff08noble\uff09\u5339\u914d\u6b63\u786e\u3002\u82e5 <code>Suites<\/code> \u5b57\u6bb5\u8bef\u586b\u5176\u4ed6\u7248\u672c\u4ee3\u53f7\uff0c\u5c06\u51fa\u73b0 404 \u65e0\u6cd5\u83b7\u53d6\u7d22\u5f15\uff0c\u56e0\u6b64\u66ff\u6362\u524d\u5fc5\u987b\u7528 <code>cat \/etc\/os-release<\/code> \u786e\u8ba4\u4ee3\u53f7\u3002<\/p>\n<p><strong>\uff083\uff09\u6587\u4ef6\u6743\u9650\u5c42\u9762<\/strong>\uff1a<code>chmod 777<\/code> \u540e\u6587\u4ef6\u5bf9\u4efb\u610f\u7528\u6237\u53ef\u8bfb\u53ef\u5199\u53ef\u6267\u884c\uff0c\u662f\u5178\u578b\u7684\u5371\u9669\u914d\u7f6e\uff1b\u82e5\u8be5\u6587\u4ef6\u4e3a\u811a\u672c\u5e76\u88ab root \u6267\u884c\uff0c\u5219\u4efb\u4f55\u7528\u6237\u5747\u53ef\u6539\u5199\u5176\u5185\u5bb9\u4ece\u800c\u5b9e\u73b0\u63d0\u6743\uff0c\u56e0\u6b64\u751f\u4ea7\u73af\u5883\u4e2d\u5e94\u907f\u514d 777\u3002<\/p>\n<h3>5.3 \u601d\u8003\u9898\uff1a\u5982\u4f55\u5c06\u6587\u4ef6\u65f6\u95f4\u4fee\u6539\u4e3a\u67d0\u4e2a\u7279\u5b9a\u65e5\u671f\uff1f<\/h3>\n<h4>\uff081\uff09Linux \u6587\u4ef6\u7684\u56db\u7c7b\u65f6\u95f4\u6233<\/h4>\n<p>\u5728\u56de\u7b54\u300c\u5982\u4f55\u4fee\u6539\u300d\u4e4b\u524d\uff0c\u9700\u8981\u5148\u660e\u786e\u300c\u4fee\u6539\u54ea\u4e2a\u65f6\u95f4\u300d\u3002Linux \u4e2d\u4e00\u4e2a\u6587\u4ef6\u5e76\u975e\u53ea\u6709\u4e00\u4e2a\u65f6\u95f4\uff0c\u800c\u662f<strong>\u56db\u7c7b\u72ec\u7acb\u7684\u65f6\u95f4\u6233<\/strong>\uff0c\u5168\u90e8\u4fdd\u5b58\u5728 inode \u4e2d\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u7f29\u5199<\/th>\n<th align=\"left\">\u540d\u79f0<\/th>\n<th align=\"left\">\u542b\u4e49<\/th>\n<th align=\"left\">\u4f55\u65f6\u66f4\u65b0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\"><strong>atime<\/strong><\/td>\n<td align=\"left\">Access Time \u8bbf\u95ee\u65f6\u95f4<\/td>\n<td align=\"left\">\u6587\u4ef6\u5185\u5bb9\u6700\u540e\u4e00\u6b21\u88ab\u8bfb\u53d6\u7684\u65f6\u95f4<\/td>\n<td align=\"left\">\u6267\u884c <code>cat<\/code>\u3001<code>read<\/code> \u7b49\u8bfb\u64cd\u4f5c\u65f6<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>mtime<\/strong><\/td>\n<td align=\"left\">Modify Time \u4fee\u6539\u65f6\u95f4<\/td>\n<td align=\"left\">\u6587\u4ef6<strong>\u5185\u5bb9<\/strong>\u6700\u540e\u4e00\u6b21\u88ab\u4fee\u6539\u7684\u65f6\u95f4<\/td>\n<td align=\"left\">\u5199\u5165\u5185\u5bb9\u65f6\uff08<code>echo<\/code>\u3001<code>vim<\/code> \u4fdd\u5b58\u7b49\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>ctime<\/strong><\/td>\n<td align=\"left\">Change Time \u53d8\u66f4\u65f6\u95f4<\/td>\n<td align=\"left\">\u6587\u4ef6<strong>\u5143\u6570\u636e<\/strong>\uff08inode\uff09\u6700\u540e\u4e00\u6b21\u53d8\u66f4\u7684\u65f6\u95f4<\/td>\n<td align=\"left\">\u6539\u6743\u9650\u3001\u6539\u5c5e\u4e3b\u3001\u6539\u6587\u4ef6\u540d\u3001<strong>\u4ee5\u53ca mtime \u88ab\u4fee\u6539\u65f6<\/strong><\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>btime<\/strong><\/td>\n<td align=\"left\">Birth Time \u521b\u5efa\u65f6\u95f4<\/td>\n<td align=\"left\">\u6587\u4ef6\u88ab\u521b\u5efa\u7684\u65f6\u95f4\uff08\u53c8\u79f0 crtime\uff09<\/td>\n<td align=\"left\">\u6587\u4ef6\u521b\u5efa\u65f6\uff0c<strong>\u4e00\u7ecf\u5199\u5165\u4e0d\u53ef\u4fee\u6539<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u672c\u673a\u5b9e\u6d4b<\/strong>\uff08Ubuntu 24.04 \/ \u5185\u6838 6.14 \/ ext4\uff0c\u4ee5\u65b0\u5efa\u7684\u6d4b\u8bd5\u6587\u4ef6\u4e3a\u4f8b\uff09\uff1a<\/p>\n<pre><code class=\"language-bash line-numbers\">touch \/tmp\/payload.sh &amp;&amp; stat \/tmp\/payload.sh\n<\/code><\/pre>\n<pre><code class=\"language-text line-numbers\">  \u6587\u4ef6\uff1a\/tmp\/payload.sh\n  \u5927\u5c0f\uff1a11         \u5757\uff1a8          IO \u5757\u5927\u5c0f\uff1a4096   \u666e\u901a\u6587\u4ef6\n\u6743\u9650\uff1a(0644\/-rw-r--r--)  Uid: ( 1000\/cloverdayssss)   Gid: ( 1000\/cloverdayssss)\n\u8bbf\u95ee\u65f6\u95f4\uff1a2026-09-17 22:11:00.112905170 +0800    \u2190 atime\n\u4fee\u6539\u65f6\u95f4\uff1a2026-09-17 22:11:00.113984001 +0800    \u2190 mtime\n\u53d8\u66f4\u65f6\u95f4\uff1a2026-09-17 22:11:00.113984001 +0800    \u2190 ctime\n\u521b\u5efa\u65f6\u95f4\uff1a2026-09-17 22:11:00.112905170 +0800    \u2190 btime\n<\/code><\/pre>\n<p>\u53ef\u4ee5\u770b\u5230\u56db\u4e2a\u65f6\u95f4<strong>\u7cbe\u5ea6\u5747\u8fbe\u5230\u7eb3\u79d2\u7ea7<\/strong>\uff0c\u4e14\u521d\u59cb\u72b6\u6001\u4e0b\u4f9d\u6b21\u9012\u589e\uff08btime &lt; mtime = ctime &lt; atime\uff09\uff0c\u7b26\u5408\u300c\u5148\u521b\u5efa \u2192 \u518d\u5199\u5165 \u2192 \u518d\u8bfb\u53d6\u300d\u7684\u64cd\u4f5c\u987a\u5e8f\u3002<\/p>\n<h4>\uff082\uff09\u56de\u7b54\u601d\u8003\u9898\uff1a\u5982\u4f55\u4fee\u6539\u6587\u4ef6\u65f6\u95f4\u4e3a\u7279\u5b9a\u65e5\u671f<\/h4>\n<pre><code class=\"language-bash line-numbers\"># \u2460 \u4fee\u6539\u4e3a\u6307\u5b9a\u65e5\u671f\uff08\u540c\u65f6\u6539 atime \u4e0e mtime\uff09\ntouch -d \"2020-01-01 00:00:00\" payload.sh\n\n# \u2461 \u5f15\u7528\u5df2\u6709\u6587\u4ef6\u7684\u65f6\u95f4\u6233\uff08\u4f2a\u88c5\u6210\u4e0e\u6b63\u5e38\u6587\u4ef6\u540c\u4e00\u65f6\u95f4\uff09\ntouch -r \/bin\/ls payload.sh\n\n# \u2462 \u5206\u522b\u6307\u5b9a atime \u4e0e mtime\ntouch -a -d \"2020-01-01 00:00:00\" payload.sh    # \u4ec5\u8bbf\u95ee\u65f6\u95f4\ntouch -m -d \"2020-01-01 00:00:00\" payload.sh    # \u4ec5\u4fee\u6539\u65f6\u95f4\n\n# \u2463 \u8fde\u5e26\u4fee\u6539 ctime\uff08touch \u65e0\u6cd5\u76f4\u63a5\u4fee\u6539 ctime\uff0c\u9700\u76f4\u63a5\u64cd\u4f5c inode\uff09\nsudo debugfs -w -R \"set_inode_field \/home\/user\/payload.sh ctime 202001010000\" \/dev\/sda2\n\n# \u2464 \u66f4\u5f7b\u5e95\u7684\u65b9\u5f0f\uff1a\u4fee\u6539\u7cfb\u7edf\u65f6\u95f4\u540e\u518d\u64cd\u4f5c\nsudo date -s \"2020-01-01 00:00:00\" &amp;&amp; touch payload.sh &amp;&amp; sudo hwclock -w\n<\/code><\/pre>\n<p><strong>\u5b9e\u6d4b\u9a8c\u8bc1<\/strong>\uff1a\u5bf9 <code>\/tmp\/payload.sh<\/code> \u6267\u884c <code>touch -d \"2020-01-01 00:00:00\"<\/code> \u540e\uff0c\u5404\u65f6\u95f4\u6233\u53d8\u5316\u5982\u4e0b\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u65f6\u95f4\u6233<\/th>\n<th align=\"left\">\u7be1\u6539\u524d<\/th>\n<th align=\"left\">\u7be1\u6539\u540e<\/th>\n<th align=\"left\">\u662f\u5426\u88ab\u4fee\u6539<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">atime<\/td>\n<td align=\"left\">2026-09-17 22:11:00.112905170<\/td>\n<td align=\"left\"><strong>2020-01-01 00:00:00.000000000<\/strong><\/td>\n<td align=\"left\">\u2705 \u5df2\u6539<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">mtime<\/td>\n<td align=\"left\">2026-09-17 22:11:00.113984001<\/td>\n<td align=\"left\"><strong>2020-01-01 00:00:00.000000000<\/strong><\/td>\n<td align=\"left\">\u2705 \u5df2\u6539<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">ctime<\/td>\n<td align=\"left\">2026-09-17 22:11:00.113984001<\/td>\n<td align=\"left\">2026-09-17 22:11:00.<strong>117905496<\/strong><\/td>\n<td align=\"left\">\u26a0\ufe0f \u672a\u6309\u9884\u671f\u6539\uff0c\u53cd\u800c<strong>\u66f4\u65b0\u4e3a\u5f53\u524d\u65f6\u95f4<\/strong><\/td>\n<\/tr>\n<tr>\n<td align=\"left\">btime<\/td>\n<td align=\"left\">2026-09-17 22:11:00.112905170<\/td>\n<td align=\"left\">2026-09-17 22:11:00.112905170<\/td>\n<td align=\"left\">\u274c \u5b8c\u5168\u672a\u53d8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u8fd9\u4e2a\u7ed3\u679c\u975e\u5e38\u5173\u952e<\/strong>\uff1a<code>touch<\/code> \u53ea\u80fd\u4fee\u6539 atime \u548c mtime\uff0c<strong>\u5bf9 ctime \u548c btime \u65e0\u80fd\u4e3a\u529b<\/strong>\u3002\u800c\u4e14\u56e0\u4e3a\u4fee\u6539 mtime \u672c\u8eab\u5c5e\u4e8e\u300c\u5143\u6570\u636e\u53d8\u66f4\u300d\uff0c\u53cd\u800c\u89e6\u53d1\u4e86 ctime \u66f4\u65b0\u4e3a\u5f53\u524d\u65f6\u95f4\u3002<\/p>\n<p>\u4e8e\u662f\u4ea7\u751f\u4e86\u4e00\u4e2a<strong>\u65e0\u6cd5\u63a9\u76d6\u7684\u77db\u76fe<\/strong>\uff1a<\/p>\n<pre><code class=\"language-text line-numbers\">mtime = 2020-01-01 00:00:00.000000000   \uff08\u4f2a\u88c5\u6210\u56db\u5e74\u524d\uff09\nctime = 2026-09-17 22:11:00.117905496   \uff08\u5b9e\u9645\u7be1\u6539\u52a8\u4f5c\u53d1\u751f\u5728\u4eca\u5929\uff09\n<\/code><\/pre>\n<p>\u5373 <strong>ctime \u665a\u4e8e mtime<\/strong>\uff0c\u8fd9\u5728\u6b63\u5e38\u60c5\u51b5\u4e0b\u662f\u4e0d\u53ef\u80fd\u51fa\u73b0\u7684\uff08\u5185\u5bb9\u4fee\u6539\u5fc5\u7136\u5bfc\u81f4 ctime \u540c\u6b65\u6216\u66f4\u665a\u66f4\u65b0\uff09\u3002\u53d6\u8bc1\u4eba\u5458\u53ea\u8981\u5bf9\u6bd4 ctime \u4e0e mtime\uff0c\u5c31\u80fd\u7acb\u523b\u5224\u5b9a\u8be5\u6587\u4ef6\u7684\u65f6\u95f4\u6233\u88ab\u4eba\u4e3a\u7be1\u6539\u8fc7\u3002\u8fd9\u5c31\u662f\u6240\u8c13\u300c<strong>\u65f6\u95f4\u4f2a\u88c5<\/strong>\u300d\uff08timestomping\uff09\u624b\u6cd5\u6700\u4e3b\u8981\u7684\u7834\u7efd\u3002<\/p>\n<p><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/17-timestomp.jpg\" src=\"\/wp-content\/themes\/Sakura\/cdn-local\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\" alt=\"\u56fe 17\u3000\u5b9e\u6d4b\uff1a\u5c06\u6587\u4ef6\u65f6\u95f4\u6539\u4e3a 1919 \u5e74\u540e\uff0catime \u4e0e mtime \u5df2\u53d8\uff0cctime \u4e0e btime \u5747\u672a\u6539\u53d8\" title=\"\"><\/p >\n<noscript><img decoding=\"async\" src=\"https:\/\/cloverdayssss.top\/wp-content\/uploads\/2026\/09\/17-timestomp.jpg\" alt=\"\u56fe 17\u3000\u5b9e\u6d4b\uff1a\u5c06\u6587\u4ef6\u65f6\u95f4\u6539\u4e3a 1919 \u5e74\u540e\uff0catime \u4e0e mtime \u5df2\u53d8\uff0cctime \u4e0e btime \u5747\u672a\u6539\u53d8\" title=\"\"><\/p><\/noscript>\n<p><strong>\u56fe 17\u3000\u5b9e\u6d4b\uff1a\u5c06\u6587\u4ef6\u65f6\u95f4\u6539\u4e3a 1919 \u5e74\u540e\uff0catime \u4e0e mtime \u5df2\u53d8\uff0cctime \u4e0e btime \u5747\u672a\u6539\u53d8<\/strong><\/p>\n<h4>\uff083\uff09\u4e3a\u4ec0\u4e48\u9700\u8981\u8fd9\u4e48\u591a\u65f6\u95f4\uff1f\u2014\u2014\u56db\u7c7b\u65f6\u95f4\u6233\u7684\u8bbe\u8ba1\u7528\u9014<\/h4>\n<p>\u6838\u5fc3\u539f\u56e0\u5728\u4e8e\uff1a<strong>\u5355\u4e00\u65f6\u95f4\u65e0\u6cd5\u5b8c\u6574\u8fd8\u539f\u4e00\u4e2a\u6587\u4ef6\u7684\u751f\u547d\u5468\u671f<\/strong>\u3002\u56db\u7c7b\u65f6\u95f4\u5404\u53f8\u5176\u804c\uff0c\u5206\u522b\u56de\u7b54\u4e0d\u540c\u7684\u95ee\u9898\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u65f6\u95f4\u6233<\/th>\n<th align=\"left\">\u56de\u7b54\u7684\u95ee\u9898<\/th>\n<th align=\"left\">\u5178\u578b\u7528\u9014<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\"><strong>btime<\/strong><\/td>\n<td align=\"left\">\u8fd9\u4e2a\u6587\u4ef6<strong>\u4ec0\u4e48\u65f6\u5019\u51fa\u73b0<\/strong>\u7684\uff1f<\/td>\n<td align=\"left\">\u5224\u65ad\u6587\u4ef6\u662f\u5426\u4e3a\u300c\u65b0\u51fa\u73b0\u7684\u53ef\u7591\u6587\u4ef6\u300d\uff1b\u786e\u5b9a\u5165\u4fb5\u65f6\u95f4\u7a97\u53e3<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>mtime<\/strong><\/td>\n<td align=\"left\">\u5185\u5bb9<strong>\u6700\u540e\u4e00\u6b21\u88ab\u6539\u52a8<\/strong>\u662f\u4ec0\u4e48\u65f6\u5019\uff1f<\/td>\n<td align=\"left\">\u5224\u65ad\u914d\u7f6e\u662f\u5426\u88ab\u7be1\u6539\u3001\u4ee3\u7801\u662f\u5426\u88ab\u690d\u5165\uff1b\u7248\u672c\u63a7\u5236\u4e0e\u589e\u91cf\u5907\u4efd\u7684\u4f9d\u636e<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>atime<\/strong><\/td>\n<td align=\"left\">\u8fd9\u4e2a\u6587\u4ef6<strong>\u6700\u540e\u4e00\u6b21\u88ab\u8bfb\u53d6<\/strong>\u662f\u4ec0\u4e48\u65f6\u5019\uff1f<\/td>\n<td align=\"left\">\u5224\u65ad\u654f\u611f\u6587\u4ef6\u662f\u5426\u88ab\u7ffb\u52a8\u8fc7\uff08\u5982 <code>\/etc\/shadow<\/code> \u88ab\u8bfb\u53d6\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>ctime<\/strong><\/td>\n<td align=\"left\">\u6587\u4ef6\u7684<strong>\u5c5e\u6027\/\u8eab\u4efd<\/strong>\u6700\u540e\u53d8\u66f4\u662f\u4f55\u65f6\uff1f<\/td>\n<td align=\"left\"><strong>\u6297\u7be1\u6539\u7684\u5173\u952e\u8bc1\u636e<\/strong>\uff1b\u53ef\u63ed\u793a\u6743\u9650\u63d0\u5347\u3001\u5c5e\u4e3b\u53d8\u66f4\u3001\u65f6\u95f4\u4f2a\u88c5\u7b49\u52a8\u4f5c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u4ece\u653b\u9632\u4e24\u4e2a\u89c6\u89d2\u770b<\/strong>\uff1a<\/p>\n<p><strong>\u653b\u51fb\u8005\u89c6\u89d2<\/strong>\u2014\u2014\u6728\u9a6c\u4e0a\u4f20\u540e\u9700\u8981\u300c\u878d\u5165\u73af\u5883\u300d\uff0c\u907f\u514d\u65f6\u95f4\u6233\u5f02\u5e38\u5f15\u8d77\u6ce8\u610f\u3002\u56e0\u6b64\u503e\u5411\u4e8e\uff1a<\/p>\n<ul>\n<li>\u628a mtime \u6539\u6210\u4e0e\u540c\u76ee\u5f55\u6b63\u5e38\u6587\u4ef6\u4e00\u81f4\u7684\u65e5\u671f\uff08<code>touch -r<\/code>\uff09\uff1b<\/li>\n<li>\u907f\u514d\u7559\u4e0b\u4e0e\u6587\u4ef6\u521b\u5efa\u65f6\u95f4\u77db\u76fe\u7684\u8bbf\u95ee\u75d5\u8ff9\u3002<\/li>\n<\/ul>\n<p><strong>\u53d6\u8bc1\/\u9632\u5fa1\u89c6\u89d2<\/strong>\u2014\u2014\u6b63\u662f\u5229\u7528\u300c\u56db\u7c7b\u65f6\u95f4\u4e92\u76f8\u7275\u5236\u300d\u6765\u53d1\u73b0\u5f02\u5e38\u3002\u5e38\u89c1\u7684<strong>\u77db\u76fe\u7ec4\u5408<\/strong>\u5305\u62ec\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th align=\"left\">\u5f02\u5e38\u6a21\u5f0f<\/th>\n<th align=\"left\">\u53ef\u80fd\u542b\u4e49<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\"left\">ctime \u8fdc\u665a\u4e8e mtime<\/td>\n<td align=\"left\">\u65f6\u95f4\u6233\u88ab\u7be1\u6539\uff08touch \u4fee\u6539 mtime \u4f1a\u66f4\u65b0 ctime\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">btime \u665a\u4e8e mtime<\/td>\n<td align=\"left\">\u6587\u4ef6\u88ab\u66ff\u6362\u6216\u91cd\u5efa\uff08\u5148\u6709\u65e7\u65f6\u95f4\uff0c\u540e\u521b\u5efa\u65b0\u6587\u4ef6\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">atime \u6781\u65b0\u4f46 mtime \u5f88\u65e7<\/td>\n<td align=\"left\">\u8be5\u6587\u4ef6\u8fd1\u671f\u88ab\u4eba\u67e5\u770b\u8fc7\uff08\u53ef\u80fd\u6b63\u5728\u88ab\u4fa6\u5bdf\uff09<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">mtime \u65e9\u4e8e btime<\/td>\n<td align=\"left\">\u65f6\u95f4\u6233\u88ab\u4f2a\u9020\uff0c\u5c5e\u660e\u663e\u5f02\u5e38<\/td>\n<\/tr>\n<tr>\n<td align=\"left\">\u591a\u4e2a\u6587\u4ef6 mtime \u5b8c\u5168\u76f8\u540c\uff08\u7cbe\u786e\u5230\u79d2\uff09<\/td>\n<td align=\"left\">\u6279\u91cf\u64cd\u4f5c\u75d5\u8ff9\uff08\u5982\u653b\u51fb\u8005\u4e00\u6b21\u6027\u91ca\u653e\u591a\u4e2a\u6587\u4ef6\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u56e0\u6b64\uff0c<strong>\u56db\u7c7b\u65f6\u95f4\u6233\u672c\u8d28\u4e0a\u6784\u6210\u4e86\u4e00\u5957\u300c\u4ea4\u53c9\u9a8c\u8bc1\u300d\u673a\u5236<\/strong>\uff1a\u5355\u72ec\u7be1\u6539\u5176\u4e2d\u4e00\u4e24\u4e2a\u5bb9\u6613\uff0c\u4f46\u8981\u540c\u65f6\u8ba9\u56db\u4e2a\u65f6\u95f4\u5728\u903b\u8f91\u4e0a\u81ea\u6d3d\uff0c\u5bf9\u666e\u901a\u653b\u51fb\u8005\u800c\u8a00\u6781\u5176\u56f0\u96be\u3002\u8fd9\u4e5f\u662f\u6570\u5b57\u53d6\u8bc1\u4e2d\u300c\u65f6\u95f4\u7ebf\u5206\u6790\u300d\uff08Timeline Analysis\uff09\u7684\u57fa\u7840\u2014\u2014\u53d6\u8bc1\u5de5\u5177\uff08\u5982 Sleuth Kit \u7684 <code>fls<\/code>\/<code>mactime<\/code>\uff09\u6b63\u662f\u6309 MAC\uff08Modified-Accessed-Changed\uff09\u65f6\u95f4\u6392\u5e8f\u6765\u91cd\u5efa\u4e8b\u4ef6\u5e8f\u5217\u7684\u3002<\/p>\n<h4>\uff084\uff09\u9632\u5fa1\u624b\u6bb5<\/h4>\n<ol>\n<li>\u4f7f\u7528 <code>auditd<\/code> \u8bb0\u5f55\u6587\u4ef6\u5c5e\u6027\u53d8\u66f4\u4e8b\u4ef6\uff08<code>ausearch<\/code> \u68c0\u7d22 write \/ attribute change\uff09\uff1b<\/li>\n<li>\u90e8\u7f72\u5b8c\u6574\u6027\u6821\u9a8c\u5de5\u5177\uff08AIDE\u3001Tripwire\uff09\u5e76\u4fdd\u5b58\u57fa\u7ebf\uff0c\u5b9a\u671f\u6bd4\u5bf9\uff1b<\/li>\n<li><strong>\u5229\u7528 ctime\u3001btime \u96be\u4ee5\u88ab\u666e\u901a\u624b\u6bb5\u7be1\u6539\u8fd9\u4e00\u7279\u6027\u8fdb\u884c\u4ea4\u53c9\u6bd4\u5bf9<\/strong>\uff0c\u91cd\u70b9\u68c0\u67e5 ctime \u4e0e mtime \u7684\u77db\u76fe\uff1b<\/li>\n<li>\u6302\u8f7d\u65f6\u4f7f\u7528 <code>noatime<\/code> \/ <code>relatime<\/code> \u9009\u9879\u51cf\u5c11 atime \u566a\u58f0\uff08\u672c\u673a\u5b9e\u6d4b\u6302\u8f7d\u9009\u9879\u4e3a <code>relatime<\/code>\uff09\uff0c\u4fbf\u4e8e\u96c6\u4e2d\u5206\u6790 mtime \u5f02\u5e38\uff1b<\/li>\n<li>\u5bf9\u5173\u952e\u76ee\u5f55\u542f\u7528\u4e0d\u53ef\u53d8\u5c5e\u6027\uff08<code>chattr +i<\/code>\uff09\uff0c\u4ece\u6839\u672c\u4e0a\u963b\u6b62\u7be1\u6539\u3002<\/li>\n<\/ol>\n<h2>\u516d\u3001\u5b9e\u9a8c\u5c0f\u7ed3<\/h2>\n<ul>\n<li>\u5b8c\u6210 VMware \u4e09\u79cd\u7f51\u7edc\u6a21\u5f0f\u7684\u539f\u7406\u68b3\u7406\uff0c\u638c\u63e1 NAT \u4e0e Host-only \u7684\u8fde\u901a\u6027\u5dee\u5f02\uff1b<\/li>\n<li>\u642d\u5efa\u51fa Kali \u2192 \u8df3\u677f\u673a \u2192 \u9776\u673a \u7684\u4e24\u5c42\u653b\u9632\u5bf9\u6297\u73af\u5883\uff0c<code>traceroute<\/code> \u9a8c\u8bc1\u8de8\u7f51\u6bb5\u6d41\u91cf\u786e\u5b9e\u7ecf\u8df3\u677f\u673a\u8f6c\u53d1\uff1b<\/li>\n<li>\u638c\u63e1 Ubuntu 24.04 \u7684 DEB822 \u6e90\u6587\u4ef6\u683c\u5f0f\u53ca\u66ff\u6362\u65b9\u6cd5\uff0c\u80fd\u72ec\u7acb\u5b8c\u6210\u6362\u6e90\u4e0e\u8f6f\u4ef6\u5b89\u88c5\uff1b<\/li>\n<li>\u6392\u67e5\u5e76\u89e3\u51b3\u4e86 cdrom \u6b8b\u7559\u6e90\u3001DNS \u672a\u6ce8\u518c\u3001NAT \u89c4\u5219\u7f3a\u5931\u4e09\u4e2a\u5b9e\u9645\u95ee\u9898\uff1b<\/li>\n<li>\u719f\u7ec3\u638c\u63e1 Linux \u6587\u4ef6\u7cfb\u7edf\u76f8\u5173\u547d\u4ee4\uff08\u6587\u4ef6\u589e\u5220\u6539\u67e5\u3001\u6743\u9650\u4e0e\u5c5e\u4e3b\u7ba1\u7406\u3001\u9690\u85cf\u6587\u4ef6\u641c\u7d22\uff09\uff1b<\/li>\n<li>\u638c\u63e1 <code>\/etc\/passwd<\/code> \u7684\u5b57\u6bb5\u7ed3\u6784\u4e0e\u5b89\u5168\u5ba1\u8ba1\u65b9\u6cd5\uff1b<\/li>\n<li>\u638c\u63e1 Linux \u6587\u4ef6\u56db\u7c7b\u65f6\u95f4\u6233\uff08atime \/ mtime \/ ctime \/ btime\uff09\u7684\u8bed\u4e49\u4e0e\u7528\u9014\uff0c\u5b9e\u6d4b\u9a8c\u8bc1 <code>touch<\/code> \u65e0\u6cd5\u7be1\u6539 ctime \u4e0e btime\uff0c\u7406\u89e3\u300cctime \u665a\u4e8e mtime\u300d\u8fd9\u4e00\u65f6\u95f4\u4f2a\u88c5\u7684\u7834\u7efd\uff0c\u4ee5\u53ca\u56db\u7c7b\u65f6\u95f4\u6784\u6210\u4ea4\u53c9\u9a8c\u8bc1\u673a\u5236\u7684\u539f\u7406\u3002<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u7f51\u7edc\u5b89\u5168\u5bf9\u6297\u80fd\u529b\u5b9e\u8df5 \u00b7 \u8bfe\u7a0b\u5b9e\u9a8c\u62a5\u544a \u5b9e\u9a8c\u540d\u79f0\uff1a\u653b\u9632\u5bf9\u6297\u73af\u5883\u642d\u5efa \u9879\u76ee \u5185\u5bb9 \u9879\u76ee \u5185\u5bb9 \u5b66\u9662 \u7f51\u7edc\u4e0e\u4fe1\u606f\u5b89\u5168\u5b66\u9662 \u59d3\u540d xxx &#8230;<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-560","post","type-post","status-publish","format-standard","hentry","category-javascriptvoid0"],"_links":{"self":[{"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/posts\/560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/comments?post=560"}],"version-history":[{"count":3,"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/posts\/560\/revisions"}],"predecessor-version":[{"id":564,"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/posts\/560\/revisions\/564"}],"wp:attachment":[{"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/media?parent=560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/categories?post=560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloverdayssss.top\/index.php\/wp-json\/wp\/v2\/tags?post=560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}