where should i go next, considering command line is very fun for me and i’m excited to keep using it

Hi, I’m doing a CTF on a WordPress site but WPscan shows no vulnerable plugins/themes. I have one username and wp-login page, but I’m told that brute-forcing is not required for this box. There aren’t any weird directories found via enumeration, and robots.txt only contains a line on wp-admin/admin-ajax.php.

In my experience with exploiting WordPress, usually finding something vulnerable in WPscan shows me which way to go, but now I’m stumped. Does anyone have any ideas, or is this a red herring?

Hey y’all I’m running a little low on cash right now so I’m trying to turn to the best source of cash I can right now so if anyone wants anything pirated Right now send me a message I’ll get it pirated for you give me like the specifications of what you want pirated and I’ll get it for you depending on what it is the the price will change I’m going to keep it as cheap as I can shoot me a message if you’re interested

my friend that owns a coffee shop asked me to poke around on his network to look for vulnerabilities in exchange for some free coffees and i saw that they had 9100 open, wasn’t familiar with it so played around and found out about PRET which gave me access to his HP printer, with transversal you can gain access to the file system etc and from what i read you can open a root shell on another port, would the scope be limited to the printer, or can the printer be used as a vector to gain access to other systems connecting to said printer?

​

tldr im not familar with printers and found a vuln, what do, i like my free cup-a-joes while writing my dnd campaigns.