Nibbles - Need a nudge in the right direction

I’ve gotten the default credentials for the page. When I log on I don’t know what I am supposed to do. I have tried a few things but they never work. I was wondering if someone would give me a helpful hint.

Have you enumerated the the service ? are there any public exploits?

@xplo8 said:
Have you enumerated the the service ? are there any public exploits?

I ran nmap and only got two services running. I looked for exploits on them and they didn’t really lead me to anything. Is there anyway I can get a reverse shell on the webpage?

maybe go one layer up, enumerate the application layer on top… any public exploits there?

what did you login to @spaceman? does that have any vulnerabilities?