Kindda new here.
Working on Lightweight at the moment.
I got the ssh shell that's suggested in the web part. Then tried capabilities, but all the interesting ones I could think of need higher privs to be set...
Then I tried adding code to the php... Access denied.
I don't know where to go next.
I don't want fish, I want to learn how to use the rod. So I don't expect solutions, just pointers
I am quite noob and I am trying to get user on HELP machine.
I only found the apache page and the message on port 3000.
I don't know which exploit I need to use to get shell.
Could you help me?
Hey. For the privesc of Help, can you give some hints? Is it related to the express application?
I am working on the lightweight machine and managed to score shell and working towards the user,
any chance you could point me in the right direction,, totally stumped as i can see both l***p users but cant access either