Inclusion

from nmap scan we got two ports are open 80 and 22

has web site tells us LFI

using following path we will get user name and password

login with credentials using port 22 ssh

privilege escalation using sudo -l we found root permission for socat let’s search in GTFO bins

finally we got root