pentestPromedium

Чайная кружка

hackerlab

Task: Pentest machine with tea-themed name. Solution: phpinfo hostname leak leads to vhost enumeration, finding Gitea with password in git history, then privesc via sudo certbot --manual-auth-hook.

$ ls tags/ techniques/
local_file_inclusionvirtual_host_discoverygit_secrets_leakgtfobins_certbot

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups