Web Developer: 1 walkthrough | vulnhub.com HD

for educational purpose only... 00:24 - starting nmap 01:21 - indexing subdirectories with dirb 01:41 - downloading pcap file 01:51 - analyzing .pcap file in wireshark 02:36 - getting 1st login creds 03:21 - logging in website 10:54 - installing vulnerable plugins in wordpress 17:30 - reading wp-config.php file 18:32 - getting 2nd login creds 19:01 - ssh with 2nd login creds 19:54 - tcpdump privilege escalation 25:11 - root flag captured