ClamAV

Starting with nmap scan here

We have so many open ports to enumerate but with not much interesting, i have to search for the name of the machine on searchsploit cus it look familiar

The last exploit(4761.pl) is what we can use to get foothold

removing the comments & adding perl shebang #!/usr/bin/perl

reading the exploit & we can see it executes sh as root & opens the port 31337 so we also have to connect through that port on our machine

now we can run the exploit

Now connect with netcat through the port 31337

And we are root automatically, no need to upgarde privs