Heal

Foothold
1. LFI to get sensitive data from Ruby files
2. Crack the hash for the user
3. Login to the Lime Survey console
4. Exploit to get foothold
5. Get reused password from config file
PrivEsc
1. Find another service running on the local machine
2. Chisel to get access to it
3. RCE
{
"ID": "gg",
"Name": "gg",
"Shell":"/bin/sh",
"Interval": "5s",
"Args":["/bin/bash",
"/tmp/rev.sh"]}