Begin of recon
Start of NMAP
Exploiting lcars plugin
Logging into WP and Getting Reverse Shell
Wordpress RevShell Returned
Using Meterpreter to pivot and provide access to MySQL
MySQL Shell Returned
Logging into Joomla and Getting Reverse Shell
Joomla Reverse Shell returned
Getting Reverse Shell on Host OS (port 443)
Shell Returned begin of local privesc recon
Beginning of Binary Exploitation
Start writing exploit script
Cracking the NTLMv2 Hash of k.svensson
===== Extra Content ======
Analyzing the PHP SQL Injection Scripts
Viewing what SQLMap does to exploit this
Stepping through Double Query Injection
Writing our own SQL Injection Exploit Script
OWA Discovering the Exchange version based upon login interface
Exploring the custom System Backup Timer Service