4 box enum www-data

www-data@ubuntu:~/html/wordpress$ cat wp-config.php
<?php
define( 'DB_NAME', 'wordpress' );
define( 'DB_USER', 'wordpress' );
define( 'DB_PASSWORD', 'lolyisabeautifulgirl' );
define( 'DB_HOST', 'localhost' );

www-data@ubuntu:~$ ls -la /home
total 12
drwxr-xr-x  3 root root 4096 Aug 19  2020 .
drwxr-xr-x 22 root root 4096 Dec  7  2020 ..
drwxr-xr-x  2 loly loly 4096 Dec  7  2020 loly

PEAS

# 1
Linux version 4.4.0-31-generic 

â•£ Users with console
loly:x:1000:1000:sun,,,:/home/loly:/bin/bash
root:x:0:0:root:/root:/bin/bash

â•£ MySQL version
mysql  Ver 15.1 Distrib 10.0.38-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2

-rwsr-xr-x 1 root root 31K Mar 11  2016 /bin/fusermount (Unknown SUID binary)

MySQL enum

LSE

Previous5 privesc KENext3 :80 wpscan

Last updated