2025-11-13 26 min
[writeup]
OffSec Stapler Writeup: WordPress LFI to root
OffSec lab. An LFI in a WordPress plugin leaks wp-config, MySQL file writes plant a web shell, and a password in bash history plus open sudo gives root.
1 post
offensive security across web, network, api and ai red teaming.