## https://sploitus.com/exploit?id=0D8248FB-0941-5922-9979-49DFD99582FD
# BlackPearl CTF
Penetration testing and vulnerability assessment of the **BlackPearl CTF** machine in an isolated lab environment.
## Overview
This project documents the exploitation process from initial reconnaissance to full system compromise.
### Attack Path
**Nmap → Web Enumeration → Virtual Host Discovery → Navigate CMS → RCE → www-data → LinPEAS → SUID PHP → GTFOBins → Root**
### Key Findings
- Open ports: **22, 53, 80**
- Web server: **nginx 1.14.2**
- Virtual host: **blackpearl.tcm**
- Application: **Navigate CMS**
- Initial access: **Navigate CMS RCE**
- Privilege escalation: **SUID PHP 7.3**
- Final access: **root**
- Flag: **`/root/flag.txt`**
### Tools Used
**Nmap · Nikto · FFUF · cURL · dig · Metasploit · Meterpreter · LinPEAS · GTFOBins**
## Disclaimer
This assessment was performed against an intentionally vulnerable CTF machine in an authorized laboratory environment. The techniques documented here should only be used on systems you are authorized to test.