Mr Robot
A medium Linux box from TryHackMe, use abuse wordpress admin for initial access, then an SUID binary for root.
Internal
A hard Linux box from TryHackMe, brute force a wordpress page for initial access, then pivot to a locally running Jenkins instance for root.
Internal
A hard Linux box from TryHackMe, brute force a wordpress page for initial access, then pivot to a locally running Jenkins instance for root.
Internal
A hard Linux box from TryHackMe, brute force a wordpress page for initial access, then pivot to a locally running Jenkins instance for root.
Blocky
An easy Linux box from HackTheBox, downloading some configuration files and using proper wordpress enumeration to get root.