基于Cardinal搭建的AWD平台

仓库：https://github.com/vidar-team/Cardinal

仓库：https://github.com/glzjin/20190511_awd_docker

0x01-平台安装

下载

https://github.com/vidar-team/Cardinal/releases Cardinal_v0.7.3_linux_amd64.tar.gz

1	tar -zxvf Cardinal_v0.7.3_linux_amd64.tar.gz

1	chmod +x Cardinal

创建数据库cardinal

1	打开防火墙3306 安全组3306

1
2
3

service mysqld start
mysql -u root -p
CREATE DATABASE `cardinal` DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

后台启动

1	screen -S cardinal

1	./Cardinal

访问

1	xxx.xxx.xxx.xxx:19999

1	xxx.xxx.xxx.xxx:19999/manager

0x02-靶机配置

https://github.com/glzjin/20190511_awd_docker

这里启动不了pwn靶机，只启动了2个队伍相同web4靶机

修改一下docker-compose.yaml

version: "2"
services:
    b4:
       build: ./b4
       ports:
           - "18894:80"
           - "18895:22"
    b5:
       build: ./b4
       ports:
           - "18896:80"
           - "18897:22"

更改以下dockerfile文件内容为下面的部分【远程ssh登录下发flag配置权限】

1
2
3

RUN useradd -g group glzjin -m && \
    password=$(openssl passwd -1 -salt 'abcdefg' '123456') && \
    sed -i 's/^glzjin:!/glzjin:'$password'/g' /etc/shadow