hackthebox

View on GitHub

Paper

A wordpress site using wpscan

https://wpscan.com/vulnerability/3413b879-785f-4c9f-aa8a-5a4a1d5e0ba2

   

recyclops list ./../

recyclops list ./../hubot

using that password we login into the machine

https://github.com/Almorabea/Polkit-exploit

https://github.com/secnigma/CVE-2021-3560-Polkit-Privilege-Esclation