[SoupsInSuits]

Hello Folks I've been experimenting around and wanna cause a little chaos my only problem is I'm to lazy to go though HTB and want to get straight into the meat and potatoes of things

i want a a good guide for gaining administrator perms to a webpage
i already know SQL injections and Brute forcing (slow asf + need a good wordlist) but need a guide for other methods to gain administrator privs to a webpage

thanks - soupsinsuits


thughunters.com doesnt have the guide allready checked

[_6n]

look rat log and make checker yourself.

[Mister-Kitty]

in this case there are no short cuts
HTB will give you good understanding of different technologies and frameworks
every site is different

but if you want a quick way
you can always try to steel the admins cookies with a good fishing site

[SoupsInSuits]

in this case there are no short cuts
HTB will give you good understanding of different technologies and frameworks
every site is different

but if you want a quick way
you can always try to steel the admins cookies with a good fishing site

Yeah but what if its lets say a government website that is run on WP i wanna brute force it but cant cuz they know good passwords

[MakeAWishKid]

"thughunters.com doesnt have the guide allready checked " ?
Check again

[Mister-Kitty]

in this case there are no short cuts
HTB will give you good understanding of different technologies and frameworks
every site is different

but if you want a quick way
you can always try to steel the admins cookies with a good fishing site

Yeah but what if its lets say a government website that is run on WP i wanna brute force it but cant cuz they know good passwords

dose the website has the option to upload file if yes you can try to up lode a reverse shell
to gain a foot hold on the server and from there privilege escalation to root the server

[SoupsInSuits]

"thughunters.com doesnt have the guide allready checked " ?
Check again

checked a second time couldnt find a good one that didnt say the obvious like use hydra and sql injections

---

in this case there are no short cuts
HTB will give you good understanding of different technologies and frameworks
every site is different

but if you want a quick way
you can always try to steel the admins cookies with a good fishing site

Yeah but what if its lets say a government website that is run on WP i wanna brute force it but cant cuz they know good passwords

dose the website has the option to upload file if yes you can try to up lode a reverse shell
to gain a foot hold on the server and from there privilege escalation to root the server

its the government of tuvalvu they use wordpress i know the username but they use the latest version