Exploiting WordPress Job Manager CV Disclosure to Gain Root on Tenten
Initial Reconnaissance
Nmap reveals two open ports: SSH (22) and HTTP (80). Detailed scanning provides service versions.
nmap -sC -sV -p 22,80 -oA nmap 10.10.10.10
The web server redirects to tenten.htb. Add this hostname to /etc/hosts:
echo "10.10.10.10 tenten.htb" | sudo tee -a /etc/hosts
The site runs WordPress, and further inspe ...
Posted on Thu, 22 Oct 2026 16:37:04 +0000 by belick