[hackerman1924]

Hi
I have a CTF I need help with. It's wordpress 5.6 without any plugins or themes. Already tried wpscan, admin user bruteforce, xmlrpc (which always returned parse error) and others.
All the files from 5.6 source code are accessible. Only user admin found. I need to have access to server or the ability to comment, but can't do it without an authenticated user (also with wp-json api)
Any idea please?

[mtdev2020]

you can bruteforce file backup

[hackerman1924]

you can bruteforce file backup

No backup found from wpscan, here's the URL:

http://cs.shenkar.cloud/index.php

[kadmmc]

Thanks for sharing buddy!

[hackerman1924]

If anybody want to help, I'm also willing to pay for a good lead of how to continue here .thanks-

[mtdev2020]

you can bruteforce file backup

No backup found from wpscan, here's the URL:

http://cs.shenkar.cloud/index.php

Do you have any info about this cTF anymore? eg: homepage program .....

[c0rpse]

Whats is the name of your CTF?

[hackerman1924]

you can bruteforce file backup

No backup found from wpscan, here's the URL:

http://cs.shenkar.cloud/index.php

Do you have any info about this cTF anymore? eg: homepage program .....

What other info do you need? the website is still online man   cs.shenkar.cloud  , as I said I got as an assignment for infosec course I'm taking.
Do you have any other idea besides the backup which I didn't try yet ?
thanks

[Alpha5050]

Thank you for the share friend, working nicely!

[hackerman1924]

Thank you for the share friend, working nicely!

what's working nicely?

[d0br0ta]

http://cs.shenkar.cloud/info.php says allow_url_fopen is on