Oscp raven2 target penetration process

Information reconnaissance stage
use dirb The scan found the following information
---- Entering directory: http://172.16.100.142/vendor/ ----
(!) WARNING: Directory IS LISTABLE. No need to scan it.
(Use mode ‘-w’ if you want to scan it anyway)

Find the first flag

seek PHPMailer 5.2.16 Of exp
searchsploit phpmailer

Copy exp To current directory

utilize 40974.py get shell, Get the second flag