Blunder (Easy)

Blunder is an Easy difficulty Linux machine that features a Bludit CMS instance running on port 80. The website contains various facts about different genres. Using GoBuster, we identify a text file that hints to the existence of user fergus, as well as an admin login page that is protected against brute force. An exploit that bypasses the brute force protection is identified, and a dictionary attack is run against the login form. This attack grants us access to the admin panel as fergus. A GitHub issue detailing an arbitrary file upload and directory traversal vulnerability is identified, which is used to gain a shell as www-data. The system is enumerated and a newer version of the Bludit CMS is identified in the /var/www folder. The updated version contains the SHA1 hash of user hugo's password. The password can be cracked online, allowing us to move laterally to this user. Enumeration reveals that the user can run commands as any system user apart from root using sudo. The sudo binary is identified to be outdated, and vulnerable to CVE-2019-14287. Successful exploitation of this vulnerability returns a root shell.

THE BLUNDER INN - 7998 Washington, Mountain Ranch, California - Pubs - Phone Number - Yelp

Sochi and Akhmat's goalkeepers horrendeus blunder gifts the easy goal - Soccer - OneFootball on Sports Illustrated

Wheel of Fortune contestant's blunder on easy puzzle costs her a staggering $1 million - Irish Mirror Online

EASY FIX Makeup Remover Pen: Instant Smudge and Mistake Corrector – CALISI BEAUTY

Hair Off Instant Eyebrow Shapers - Fast, Easy, & Mistake Proof Waxing Strips - Natural & Pain-Free Eyebrow Waxing Kit -Wax Strips for Hair Removal for All Skin Types (18

Rc6 is a blunder by white, found this winning combination in a game. Black to play and win. : r/chess

High Quality white ceramic coffee mug with wide C-Handle for easy and comfortable hold. Vibrant high definition permanent print will never fade, peel

Blunder Boys - The Three Stooges - 1955 - Movie Poster Mug

Jason Naismith admits Scott Fox's Ross County team-mates went easy on him after Rangers blunder because it was so out of character

Warriors, other Cavaliers players go easy on JR Smith after epic blunder - NBC Sports

Beauty Blunder Fixes in 3 Easy Steps – StyleCaster

Blunder (Easy)

Common Opening Traps and Blunders 1. e4 - Part 3

It Is An Easy Mistake

Easy Fixes for Common Beauty Blunders

Blunder, HackTheBox, Walkthrough