Rooted. I learnt a lot, thanks to the creator of the machine.
User: automatic enumeration and brute force are enough to get the credentials.
User2: enumerate what you cannot see.
Root: check privileges, google and create your payload. Msfvenom is…
Rooted. It was not really difficult but I learnt few things during the process.
Initial foothold: standard dictionaries will not work, visit that web shells website and try.
User: check permissions you have and google that program.
Root: use an a…
Good box for newbies like me. I learnt a lot.
Initial foothold: knowing the web, search for an exploit.
User1: enumerate to know which files you have access to. Then analyse them to reach the most interesting one with a password.