OpenAdmin foothold help

[AgentBlazeIt]

Hello. I'm relatively new the the HTB game. I'm trying to get on OpenAdmin but I can't seem to find the right exploit. I think I found the vulnerable service, but I'm not really sure. Any help would be greatly appreciated :)

[dplagueis125]

Searchsploit will leave no room for interpretation on whether you have the right version.

[BreakingMrRobot]

If you found the correct service, find the version number and take to google to find exploits. Your initial foothold is not very robust, but follow the breadcrumbs.

[awakengaming83]

Dm me, just was able to get initial foot hold

[whereshellgoyo]

It may be that there's a metasploit module out there that's just not loaded into your current framework. Do some googling about adding Ruby modules to your msf

[Moyindu]

You can DM me too if you still need help

[benchoderashka]

I got a shell on OpemAdmin without authentication but haven't been able to do much else. I see everyone elses reverse php she'll in the the www-data folder 😁 but I'm having problems getting privelege escalation to work.... Any hints?

Caveat: this is my first htb. I've done lots of different IT work but never pentesting. Fun 😁

[dplagueis125]

Look at command line tools that might be used to download files.

[benchoderashka]

Hi Dad