TryHackMe — Blog — Walkthrough

INTRODUCTION

ENUMERATION

  • ap = All Plugins
  • at = All Themes
  • dbe = Database Exports
  • cb = Config Backups
  • u = Enumerate Users
  • Detection-Mode = Since we’re not worried about being detected we can use aggressive mode which occasionally delivers more results at the cost of generating more noise.

EXPLOITATION

  1. msfconsole
  2. search wordpress 5.0
  3. use 0

PRIVILEGE ESCALATION

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store