Vulnversity - Walkthrough | TryHackMe

using shell.php from pentest monkey
find SUID: find / -user root -perm /4000 2 (and angle bracket, YT filter the symbol in description) /dev/null
for better shell reading: python -c 'import pty;pty.spawn("/bin/bash")';
TryHackMe Offensive Pentesting Playlist: • Offensive Pentesting |...
Timeline:
00:00 - Nmap/Rustscan
01:25 - Task 2 Answers
02:30 - Task 3 Gobuster/Feroxbuster
03:45 - Task 4 initial access to /internal/
04:42 - Task 5 Test .php extension
05:20 - shell upload
06:00 - Initial foothold
09:10 - Get Root access