Symfonos-1 VulnHUB Walkthrough
Symfonos Box from VulnHub This box is from the TJ NULL list for OSCP preparation. Gaining the initial vector was easy through SMB. The attack followed the following steps: Enumeration through SMB – anonymous login Gaining access to user’s account through SMB Enumerating the WordPress site Found the “Upload Directory has listing enabled”. Found Siteeditor vulnerabilty for LFI Gained initial access PATH exploit for privelege escalation Let’s first start with the Nmap scan....