IP:

Hashes

Users

alice

Passwords

Creds

========================================================

NMAP

Directory Brute Force

FileBrute Force

Other

========================================================

Foothold

Wordpress is running.

Ran WPSCAN

Found a vuln plugin

Exploit:

 

PrivEsc