https://app.hackthebox.com/machines/Devel
Run a nmap scan to find for open ports.
Webserver shows the IIS7 service.
Login to the FTP server via anonymous
It is a asps webserver , we can craft a reverse shell and put it inside the server.
Use msfvenom to create a payload.
Upload the payload via the FTP server.
Start a netcat listener and reload the reverse shell in the browser.
Upload it to the FTP server
Move to the inetpub\wwwroot directory to find the upload.
Run the exploit and root is gained.
Persecure : my learning archive 