Annie

Annie - tryhackme retired machine walkthrough.

Approach

Ran nmap scan to discover open ports (SSH, HTTP)

Enumerated web directory and found WordPress installation

Used wpscan to identify vulnerable plugins

Cracked admin credentials using Hydra

Uploaded reverse shell via WordPress admin

Escalated privileges using SUID binary

Loading writeup from GitHub...