[CTF] Kardama Cyber Range — Machine: Novice-01 Write-up

Completed Novice-01 on the cyber range today. Here's my approach:

1. Nmap scan revealed port 80 and 22 open.
2. gobuster found /admin panel with default creds admin:admin
3. File upload vulnerability → webshell → reverse shell
4. Found SUID binary → GTFOBins → root!

Learning: Always check default credentials and SUID binaries.