Granny

Granny is a surpisingly challenging box if you don’t use metasploit for the initial compromise. This machine tests the user’s ability to enumerate web services, exploit WebDAV, and use metasploit to escalate privileges. Step 1: Enumerate with NMAP We start our investigation by enumerating with NMAP. ➜ granny nmap -v -A 10.129.95.234 -Pn Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times may be slower. Starting Nmap 7....