dpwwn: 1

[ vulnhub  boot2root  walkthrough  ]

Goal

root

Download

https://www.vulnhub.com/entry/dpwwn-1,342/

Walkthrough

nmap
alt text

default 80
alt text

after some web enumeration nothing found. looked at other open port mysql and found connectivety as root no password worked
alt text

database contained ssh creds
alt text

ssh worked
alt text

found script in home directory running as root and able to edit
alt text

updated with reverse shell
alt text

setup listener and waited…root
alt text

Written on September 4, 2019
Share on: