Find You’re Path
Here we are given username and password for the user bob
. We can ssh
into the machine as follows:
As you can see, when we perform sudo -l
we see that we can run the vim
command as any user or group (ALL:ALL
) without the need to specify our password. Lets have a look at how we can get a root shell with Vim
on GTFOBins:
We run the provided command and we have now a root shell:
We go into the /root
folder and get the flag. Voilà: