Shield

SOLVED

In starting point shield, it tells us to use GoBuster to map out the directory file structure of the web server. However nothing I do with GoBuster hints me to try to use what is suggested in the walkthrough http://10.10.10.29/wordpress/wp-login.php

Were we expcted to know this about ISS?

Or was I supposed to pick this up from GoBuster somehow? If so, then why bother using GoBuster

I figured it out

Instead of the syntax used in the walkthrough I used this

gobuster dir -u http://10.10.10.29/wordpress -w /usr/share/wordlists/dirbuster/directory-list-2.3-small.txt -x php,txt,py -o GoBuster

this returned a wp-login.php with status 200.

Which makes more sense rather than just telling us to do the next step. I hope this is fixed because this just causes confusion… or makes us do more research :wink: who knows.