infraPromedium

Скрипт-кидди (Script-kiddie)

hackerlab

Task: Pentest machine with WordPress site requiring initial access and privilege escalation. Solution: Exploited CVE-2019-9978 in Social Warfare plugin for RCE, used password reuse for SSH access, then GTFOBins nano privesc via sudo to read root flag.

$ ls tags/ techniques/
rcesudo_privescsshwordpresssocial_warfarecve_2019_9978password_reusenanogtfobinstwo_part_flag
WordPress plugin vulnerability exploitation (CVE-2019-9978)Password reuse (DB credentials → SSH)GTFOBins nano privilege escalationTwo-part flag assembly
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups