In starting point shield, it tells us to use GoBuster to map out the directory file structure of the web server. However nothing I do with GoBuster hints me to try to use what is suggested in the walkthrough http://10.10.10.29/wordpress/wp-login.php
Were we expcted to know this about ISS?
Or was I supposed to pick this up from GoBuster somehow? If so, then why bother using GoBuster
I figured it out
Instead of the syntax used in the walkthrough I used this
gobuster dir -u http://10.10.10.29/wordpress -w /usr/share/wordlists/dirbuster/directory-list-2.3-small.txt -x php,txt,py -o GoBuster
this returned a wp-login.php with status 200.
Which makes more sense rather than just telling us to do the next step. I hope this is fixed because this just causes confusion… or makes us do more research who knows.