LazySysadmin Done

Finished badstore, so it was time for something new.

So I downloaded and spun up LazySysAdmin.  A friend concurrently tried the same and showed me a couple of things. (SPARTA!!!) I learned about wpscan from some googling which turned up some nice info. Found an open share which had a password hidden in it.  Located the WordPress config file and got myself into a basic shell with the info I found there, then once in was able to get a root shell by launching BASH from sudo.  It’s listed as an easy Boot2Root, and it was fairly straightforward. Lots of fun though. Thanks to Togie McDogie (@TogieMcdogie)!

Onto the next one…

Leave a Reply

Your email address will not be published. Required fields are marked *