HTB: SwagShop
Linux machine exploiting the Magento Shoplift SQL injection to create an admin user, chaining an authenticated Magento RCE for a shell, and abusing a sudo vi rule for root.
Linux machine exploiting the Magento Shoplift SQL injection to create an admin user, chaining an authenticated Magento RCE for a shell, and abusing a sudo vi rule for root.