LazySysAdmin write up

A story about a hacker and a lazy system administrator.

Introduction

Lazysysadmin is a simple machine found on vulnhub.com. It’s a type of machine where you have to gain root access to the operating system, similar to the OSCP. After our search, we found a SMB service that leaks information about wp-admin and ssh. To obtain root access, we exploit an incorrect permission setting. If you are new to pentesting, this machine is ideal …

infosec oscp-preparation pentest vulnhub-walkthrough