You can gather all the pieces to the puzzle if you carefully read all you're given. Nothing is hidden from you in this machine so it is up to you to spot the weaknesses.
really examine what the script is doing
maybe you can hijack the functio…
Not very familiar with dns enumeration and whatever I try does yields no resutlts, can someone help me out with the dns enumeration. I tried nmap scripts, nslookup, dig, and dnsrecon and like I said I got nothing out of it. Help appreciated.
Can somebody send me a message with some a hint on how to get a user shell
I found login credentials, got the shell via RCE just fine, found the db credentials
I also did some enumeration and saw a file that looks like an md5 hash, is that somethi…