lab writeup

Voila, the b374k shell shows up! Let’s look around to search for the token.
Going two folders up, to /var/www, and here we go:
Click the file to view it, and you’re one step further into hacking the
Stable and Secure Bank!
moving on
It is important to keep track of any and all findings throughout the penetration
test. The credentials found in one system may easily be used
elsewhere, as users tend to choose the same passwords. Let’s try to log
on with the very same password into Ralph’s email via web access, discovered
on the port scanning stage:
It doesn’t always work, but give it a try, and you might get lucky. Here’s
what you get to see inside:
Page
21 of 22