DriftingBlues 5 Walkthrough
WordPress user enumeration via wpscan plus SSH brute-force gain a foothold, then a cracked KeePass database yields a filename that triggers a root cron job for root credentials.
Tagged “Wpscan”
2 entries tagged “Wpscan”. Browse all tags
All entries
DriftingBlues 2 Walkthrough
A WordPress login brute-forced with wpscan plants a PHP reverse shell in a theme's 404.php, then passwordless sudo nmap escalates to root.