Writeups

Mr-Robot:1 — full chain (WordPress → fsociety)

Dir busting reveals a WordPress install. Brute the login, drop a reverse shell via theme editor, then chase the three keys to root.