> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/writeups-ctf/vulnhub/linux-vulnhub.md).

# VulnHub Linux

VulnHub Linux 靶机本地实验路径，从信息收集到拿到 root。

<table data-view="cards" data-full-width="false" data-search="false"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h3><i class="fa-linux" style="color:$primary;">:linux:</i></h3></td><td><h4>Presidential：1 台 VulnHub Linux</h4></td><td>Presidential：1 台 VulnHub Linux 靶机复盘，涵盖 Web 枚举、信息泄露、虚拟主机、子域名枚举，并附带实战枚举、漏洞利用、立足点获取和权限提升笔记。</td><td><a href="/pages/1d39454cb4ab23aa0c1fb3a3930c76ad4011d63f">/pages/1d39454cb4ab23aa0c1fb3a3930c76ad4011d63f</a></td></tr><tr><td><h3><i class="fa-linux" style="color:$primary;">:linux:</i></h3></td><td><h4>Infovore：1 台 VulnHub Linux</h4></td><td>Infovore：1 台 VulnHub Linux 靶机复盘，涵盖 Web 枚举、LFI（本地文件包含）、利用 info.php 中可见的 file/_uploads（通过 phpinfo() + 竞争条件实现 LFI2RCE）、系统枚举（Linpeas），并附带实战枚举、漏洞利用、立足点获取和权限提升笔记。</td><td><a href="/pages/1365f49bf38a0b5248d94663987a20c09076809d">/pages/1365f49bf38a0b5248d94663987a20c09076809d</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/zh/writeups-ctf/vulnhub/linux-vulnhub.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.