Academy - Getting Started - Public Exploits | How to pick the right exploits?

HTB Content Academy
, ,
1

Fellow Hackers,

I am currently trying to solve this exercise. I am at the point where I need to decide what exploit needs to be used for this scenario. I have looked at the hint provided and it suggests looking for plugin exploits. Upon searching for exploits on Metasploit, I see exploits ranging from Remote code execution (RCE) to (Backup file Read Vuln).

The issue I ran into here is that I had no idea where this flag would be to actually use the appropriate exploit. After going through solutions from other users. It seems that they utilised a Backup File Read Vulnerability to download the flag. There seems to be a knowledge gap that I am having here. Please advice on how can I teach myself to match the objective(location of flag) with the appropriate exploit.

image
image1309Ă—302 77.8 KB

Now I am guessing that, in the exam no hints will be provided. Pentesters are required to figure out which exploit suits works best for the given objective. Would love to know how do you use do it.

Thanks

1 Like
2

“wordpress” has virtually millions of vulns… you need to further enumerate to get the version and/or plugins, then a CVE will become apparent. search for http enumeration tools, or try nmap --script=http-enum, or any of the pre-installed NSE’s

if that all sounds like jibberish, just google search “how to enumerate wordpress”

the object here is to find a vulnerable plugin. should be easy to find

1 Like
3

Thanks mate. That made it more clear. Now I know how to enumerate better.

1 Like