Blackpearl

1. ffuf give us nothing
2. dnsrecon -r 127.0.0.0/24 -n 10.0.2.X -d blah
   1. blackpearl.local 127.0.0.1
3. add this info inside your /etc/hosts
4. access blackpearl.local and see php page
5. try ffuf inside this new page
6. finded /navigate
7. search google -> navigate cms exploit
8. find Metasploit
   1. set LHOST
   2. set VHOST (blackpearl.local)
   3. run
   4. shell
9. user www-data
10. need to use privilege escalation
11. spawn tty shell (search google)
12. run linPEAS to privilege escalation
    1. find SUID binaries
    2. find / -type f -perm -4000 2>/dev/null
13. GRFObins
    1. suid
    2. use php module
14. /usr/bin/php7.3 XXXX(CODE_SUID_FROM_GRFOBINS)
15. DONE