pentesteasy
Sambo (Самбо)
hackerlab
Task: Pentest machine with SMB and web services. Solution: Found phpbash.php web shell via robots.txt, extracted old password from backup wp-config.php in SMB share, used SUID busybox su applet with old password for root access.
$ ls tags/ techniques/
credential_extractionsuid_exploitationweb_shell_exploitationbackup_file_analysis
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]