#
 
Nmap Output:
 
 
Dirb Output:
 
 
When we try to go to the WebDav site, it asks for a username and password. When we search on Google, we can see wampp:xampp. We also learn that we can upload files to the site with cadaver.
 
 
Let's put Reverse Shell into the webdav folder with cadaver and listen to the port we wrote in the reverse shell with netcat.
 
 
We can read the User.txt file.
 
 
 
Since we can use the cat command with sudo, we can also read the root.txt file.