Pwned

Description ⤵️

💡 Pwned ⤵️

• VM name : Pwned
• Difficulty : Easy
• DHCP : Enabled
• Goal : 3 flags
  This works better with VirtualBox rather than VMware

Let’s find the IP Address first »

IP : 10.0.2.28

Port Scan Results ➡️

OPEN PORTS >
21   FTP
22   SSH
80   HTTP

---

Web Enumeration ⤵️

Source code ⤵️

Lets deal with this login page →

ftpuser : B0ss_B!TcH

---

FTP Enumeartion ⤵️

Now logging in with that credentials →

With this lets have a shell now →

---

SHELL ⤵️

Now lets check sudo -l command →

while executing sudo -u selena ./home/messanger.sh

Lets try docker command for root access →

Now lets try this docker payload →

Now I got it →

If you have any questions or suggestions, please leave a comment below. Thank You !