Discovery: nmap, filebuster, gobuster
Checking source files
Vhost discovery: msfconsole
LFI for config files
Decrypt dev pass: john
Shell Upload: Searchsploit for ClipBucket
Decrypting id_rsa: ssh2john, john
Root escalation: tar * exploit: www.hackingarticles.in/exploiting-wildcard-for-privilege-escalation/
