portas abertas: 22 ssh 80 http

diretorios/arquivos abertos | /robots.txt: Robots file | /.gitignore: Revision control ignore file | /UPGRADE.txt: Drupal file | /INSTALL.txt: Drupal file | /INSTALL.mysql.txt: Drupal file | /INSTALL.pgsql.txt: Drupal file | /CHANGELOG.txt: Drupal v1 | /: Drupal version 7 | /README.txt: Interesting, a readme. | /icons/: Potentially interesting folder w/ directory listing | /includes/: Potentially interesting folder w/ directory listing | /misc/: Potentially interesting folder w/ directory listing | /modules/: Potentially interesting folder w/ directory listing | /scripts/: Potentially interesting folder w/ directory listing | /sites/: Potentially interesting folder w/ directory listing |_ /themes/: Potentially interesting folder w/ directory listing

http://10.10.10.233/sites/default/settings.php

USEI O METASPLOIT PARA DRUPAL E CRIEI UM METERPRETER DEPOIS APENAS USEI SCRIP PHP PARA PEGAR OS USUARIOS DO SSH NO BANCO MYSQL NO ACESSO SSH ENCONTREI A FLAG ABAIXO

561efb04fb9ede9f1bbb4a31d18972bc