https://www.vulnhub.com/entry/evm-1,391/
Review
- Directory enumeration will lead to a wordpress site
- WPScan the site to gain creds
- Use metasploit to gian wp admin access
- Search for hidden files to find the password for the root user
Enumeration
Run nmap scan to find for open ports.
Run a gobuster scan to find for hidden directories.
Port 80
Unable to load the wordpress site.
Let’s use WPscan to enumerate.
Since I cant load the WordPress site I’ll use metasploit to see if I can gain access.
Set up the options.
Foothold
A shell is gained.
Head to the home folder and check the directory. Search for hidden files and there will be the root password.
Privilege escalation
Found the final flag.
Persecure : my learning archive 