Official Blunder Discussion

Super fun box, very straightforward and the machine felt “lived in” which is nice. I am so rusty and made so many dumb mistakes, but 2’ish hours isnt too bad from boot to root after 6month break. yay learning!

Foothold: enum the main service and its vulns, fuzz for some specific file extensions to find juicy info, keep your cool, and dont forget to bring your towel. Defaults can be your downfall…

User: Directory enum (but not too far from where you start with your foothold account), hashcat or pyrit; beware: thar be red fish!

Root: There is a good john hammond or liveoverflow video (cant remember which) on how to do the root privesc with an indepth explanation, it was released in late 2019 iirc; gtfo of the recycling bins, and keep it to 1line.

PM me if you need some assistance, but I might be slow to respond.