Official Doctor Discussion

Type your comment> @exord26 said:

I found the default creds but as mentioned on various sources, they won’t work remotely. And the response implies that the default password has not been changed. So that might help in priv esc later on. That also rules out brute force which sometimes works on easy boxes.

Then what is left is to find some other user and their password, or try to get something back from that communication channel.

Any hints or nudges appreciated.

where u found ?

Google