Enumeration
Started with a standard nmap scan:
nmap -sC -sV -oN nmap/initial 10.10.10.x
Found ports 22 (SSH) and 80 (HTTP) open.
Foothold
The web application was running a vulnerable version of...
Privilege Escalation
After gaining a shell, found a SUID binary...
Takeaways
This box demonstrated the importance of thorough enumeration and checking for misconfured SUID binaries.