In this video, we'll try to enumerate for subdomains with wfuzz then abuse gila cms Directory traversalFile Inclusion when we got our login credentials then upload and execute our reverse shell and privilege escalate with cronjob.
Link: https://tryhackme.com/room/cmess