DC-1 is a VulnHub CTF, also featured on OffSec Proving Grounds. It was fairy simple and revolved around an old version of the Drupal CMS and a binary file with the SUID bit set.
Phase 1: recon
I started by using nmap to see what was running on this server, but ultimately the only service that ...