Friendzone

Enumeration

nmap -sC -sV -oA ./friendzone 10.10.10.123

The host exposes FTP, SSH, DNS, HTTP, HTTPS, and Samba. Anonymous SMB enumeration identifies the Files, general, and writable Development shares.

DNS, SMB, and web access

The TLS certificate and DNS service reveal the FriendZone domains. Data recovered from the SMB shares provides credentials for the HTTPS administration interface, while the writable development share supplies the file-placement path used by the web application.

Shell and privilege escalation

The original walkthrough combines the writable SMB location with the web application's file-inclusion behavior to execute a PHP reverse shell. Local enumeration then identifies the Python library-hijacking path used to obtain root. Detailed command output remains in the linked CherryTree notes.