OffSec Proving Grounds
LinkedIn
  • Proving Grounds
    • Proving Grounds Practice
      • Active Directory
        • Nagoya
          • Enumeration
            • 80
            • 445
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • Access
          • Recon
          • Enumeration
            • 80
          • Foothold
            • Eunermation
          • Priv Esc
            • svc_mssql
            • Administrator
          • Credentials / Notes / LL
        • Resourced
          • Recon
          • Enumeration
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Hokkaido
          • Recon
          • Enumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Heist
          • Recon
          • Enumeration
            • 8080
          • Foothold
            • Enumeration
          • Priv Esc
          • Priv Esc Unintended Route
          • Credentials / Notes / LL
        • Vault
          • Recon
          • Enumeration
            • 445
            • 389
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Nara
          • Enumeration
            • 3269
            • 445
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • Hutch
          • Enumeration
            • 445
            • 80
            • 389, 88
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
      • Windows
        • Billyboss
          • Recon
          • Enumeration
            • 80
            • 8081
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Kevin
          • Recon
          • Enumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Internal
          • Recon
          • Enumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • DVR4
          • Recon
          • Enumeration
            • 8080
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Nickel
          • Recon
          • Enumeration
            • 80
            • 33333
            • 8089
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Jacko
          • Recon
          • Enumeration
            • 80
            • 8082
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Shenzi
          • Recon
          • Enumeration
            • 80
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Algernon
          • Recon
          • Enumeration
            • 9998
            • 21
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Craft
          • Recon
          • Enumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Squid
          • Enumeration
            • 3128
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • Medjed
          • Enumeration
            • 8000
            • 30021
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • AuthBy
          • Enumeration
            • 21
            • 242
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
      • Linux
        • ZenPhoto
          • Enumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • ClamAV
          • Recon
          • Enumeration
            • 80
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • PayDay
          • Recon
          • Enumeration
            • 80
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Clue
          • Recon
          • Enumeration
            • 80
            • 445
            • 3000
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Pelican
          • Recon
          • Enumeration
            • 8080
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Zipper
          • Recon
          • Enumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Postfish
          • Recon
          • Enumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • LaVita
          • Recon
          • Enumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • Flu
          • Recon
          • Enumeration
            • 8090
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Peppo
          • Enumeration
            • 8080
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes / LL
        • Xposedapi
          • Enumeration
            • 13337
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • Marketing
          • Enumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
        • Ochima
          • Enumeration
            • 8338
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
    • Proving Ground Play
      • Warm up
        • Potato
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • 2112
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Empire-breakout
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • 10000
            • 20000
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Seppuku
          • Recon
            • nmap
          • Enumeration
            • 7080,7060
              • dir busting
            • 80
              • dir busting
            • 445,139
            • 8088
          • Foothold
          • Priv Esc
          • Credentials / Notes
        • OnSystemShellDredd
          • Recon
            • nmap
          • Enumeration
            • 21
            • 61000 SSH
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • DriftingBlues6
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Blogger
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • Page 1
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Amaterasu
          • Recon
            • nmap
          • Enumeration
            • 40080
              • dir busting
            • 21
            • 33414
            • 25022 SSH
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • SunsetDecoy
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • BBSCute
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • 88
            • 110,995
          • Foothold
          • Priv Esc
          • Credentials / Notes
        • Monitoring
          • Recon
            • nmap
          • Enumeration
            • 80
            • 443
            • 25
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Solstice
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • 21
            • 25
            • 2121
            • 3128
            • 8593
            • 54787
            • 62524
          • Foothold
            • Enumeration
          • Priv Esc
          • Priv Esc
          • Credentials / Notes
        • Moneybox
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • 21
          • Foothold
          • Priv Esc
          • Credentials / Notes
      • Get to work
        • Stapler
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • 21
            • 666?
            • 139
            • 12380
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Election1
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Tre
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
            • 8082
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Pwned1
          • Recon
            • nmap
          • Enumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials / Notes
        • Funbox
          • Recon
            • nmap
          • Enumeration
            • 80
              • dir busting
          • Foothold
          • Priv Esc
          • Credentials / Notes
        • BTRSys2.1
          • Recon
          • Enumeration
            • 80
              • dir busting
            • 21
          • Foothold
            • Enumeration
          • Priv Esc
          • Lessons Learned
      • Try Harder
        • InsanityHosting
          • Enumeration
            • 80
            • 21
          • Foothold
          • Priv Esc
          • Credentials / Notes / LL
    • Template
      • Enumeration
        • 80
      • Foothold
      • Priv Esc
      • Credentials / Notes / LL
Powered by GitBook
On this page
  1. Proving Grounds
  2. Proving Ground Play
  3. Get to work
  4. BTRSys2.1

Lessons Learned

You can catch a reverse shell on wordpress by editing the templates if you cant edit the plugins

PreviousPriv EscNextTry Harder

Last updated 8 months ago