Summary

We gained initial access through a vulnerable webservice, after getting a reverse shell, we were able to escalate privileges through a KE, the target was vulnerable to SMBGhost.