🐧Sumo

192.168.84.87

Enumeration

sudo nmap 192.168.57.87 -sV -A -p-

Port 80

Gobuster

Nikto Scan

Metasploit is garbage use https://github.com/b4keSn4ke/CVE-2014-6271arrow-up-right

Shell

Get a decent shell :

python -c 'import pty; pty.spawn("/bin/bash")'

Could not get this exploit to compile to save my life. Tried python and c. Had to look at a hint.

Error

After going back and researching this gcc error was happened because gcc was not added to path.

Used fix from https://blog.gibbons.digital/hacking/2021/05/04/stuff.htmlarrow-up-right The exploit now compiles.

Root

Last updated