<h1>Smol</h1>
<blockquote>
<p><a href="https://tryhackme.com/room/smol">https://tryhackme.com/room/smol</a> | medium | Test your enumeration skills on this boot-to-root machine.</p>
</blockquote>
<p>Information：At the heart of <strong>Smol</strong> is a WordPress website, a common target due to its extensive plugin ecosystem. The machine showcases a publicly known vulnerable plugin, highlighting the risks of neglecting software updates and security patches. Enhancing the learning experience, Smol introduces a backdoored plugin, emphasizing the significance of meticulous code inspection before integrating third-party components.</p>
<p>Quick Tips: Do you know that on computers without GPU like the AttackBox, <strong>John The Ripper</strong> is faster than <strong>Hashcat</strong>?</p>
<h2>前期踩点</h2>
<p>和 HackMyVm 的 Smol 一模一样：<a href="https://sunsetaction.top/2025/04/03/HackMyVMSmol/">https://sunsetaction.top/2025/04/03/HackMyVMSmol/</a></p>

TryHackMe - Smol

HackTheBox - Machine - Cap

Personal - sunset