I was pen testing an Unix web server for a challenge. I need to get root/shell access to the server & have got stuck at a point for quite a while now.
I have access to the web admin console but have not been able to find any RFI vulnerabilities.
Also I have gained access to the mysql database but the remote user does not have any file privileges, nor has permissions on the mysql database(has access to the application database only). The root user has no password set, but access is given only to localhost.
So, I am pretty much stuck at this point. Can anyone provide any ideas how to proceed next?