0. Preface

This is a very straightforward machine. There is a small rabbithole right at the start with the Simply Poll plugin, though.

In this box, we will be tackling:

1. Weird Hydra results.
2. Resetting WordPress passwords through the database.
3. Getting a reverse shell using a WordPress “plugin”.
4. Exploiting an SUID binary

Continue Reading...

0. Preface

If you are still using Social Warfare 3.5.0 on WordPress, please update that plugin. Also, don’t leave users hanging around in the LXD group. Both of those are bad for health.

In this box, we will be tackling:

1. RCE through Social Warfare 3.5.0
2. Two different methods of privilege escalation
   • Using LXD (unintended)
   • Using GTFOBins and some scripts and binaries

Continue Reading...

0. Preface

This box is a pretty straightforward one. Just gotta sift through the LinPEAS output and you’re pretty much golden for privilege escalation.

In this box, we will be tackling:

1. Koken CMS exploit
2. Careful reading through LinPEAS output

Continue Reading...