Hey guys! Today we’re going to tackle the CTF Blog, from TryHackMe (not to break the habit), which basically involves a blog made by our friend Billy Joel on top of WordPress (at this point you can…

SystemWeakness's platform is  dedicated to cybersecurity education and awareness, offering insights into common security vulnerabilities, attack techniques, and risk mitigation strategies. Through articles, tutorials, and security advisories, SystemWeakness offers insights into securing software applications, networks, and systems from cyber threats. Readers can learn about secure coding practices, penetration testing methodologies, and incident response procedures to strengthen their cybersecurity posture and protect against cyber attacks.

System Weakness

This post describes a Capture The Flag (CTF) challenge involving a WordPress blog on TryHackMe. It details steps like port scanning, web reconnaissance, using WPScan for vulnerability detection, enumerating users, brute-forcing passwords using Metasploit, and exploiting a Remote Code Execution (RCE) vulnerability in WordPress version 5.0. The post concludes with a successful privilege escalation using a script running with SUID permissions.

Hacking a WordPress Blog