wordpress

wordpress

• login

  updating wordpress cred via mysql

• shell

  • by updating 404.php in theme editor

  • by uploading shell.php via new plugin install

    • for uploaded shell http://192.168.45.5/wp-content/uploads/

• priviledge escalation

  • check wp-config.php in wordpress dir , it contains machine user cred