Dev0Ops Privilege Esc ?

HTB Content Machines
, ,
21

Ok anyone wants to discuss this machine I feel like what worked for privesc couple of hours ago isn’t working now not sure if I did something wrong or got root by mistake

22

@T3jv1l said:
Hi all i need little bit help with this priv esc , i run enumerate tool i found more command but i dont know what should i do

You dont seem to be do a single box without asking for a hint, help, or some stupid answer do you?

23

help me out i m able to able to get user

24

Fun machine, thanks @lokori

25

I got user flag without a reverse shell. I am not sure how to get a reverse shell to priv esc, any hint?

26

@underd0g read some more files. You don’t need to guess arbitrary filenames in this case :slight_smile:

27

@lokori said:
@underd0g read some more files. You don’t need to guess arbitrary filenames in this case :slight_smile:

thanks, I found my way in. It was a technique I always used but for some reason I was blinded lol thanks

28

@cdf123 said:
Box name is a great hint as well.

Well I found something weird

29

For others like me who think that the tool on the box is failing. I had to watch my scroll bar in my console because it didn’t look like I could scroll down, but I could.

30

I’d really appreciate a PM . Reviewed present and past with no ideas

31

Goot r00t!!! Took longer than it should I was over thinking things.

32

Got root. That was a fun box, took learning new things. PM if you need help.

33

@lokori said:
You shouldn’t rely on automated enumeration scripts. Research the machine on your own.

Anyone have some good reading material for priv esc on linux? Keen to read and learn

34

Rooted!! Nice box!!

35

Got root, historic box!

36

@shane2483 Basic Linux Privilege Escalation - g0tmi1k

37

@godexmachine said:
@shane2483 Basic Linux Privilege Escalation - g0tmi1k

Thanks mate, Ive got user. Been trying at this root for a couple of days now. I have found certain logs but have no idea what to do with it all.

38

@shane2483 said:

@godexmachine said:
@shane2483 Basic Linux Privilege Escalation - g0tmi1k

Thanks mate, Ive got user. Been trying at this root for a couple of days now. I have found certain logs but have no idea what to do with it all.

Imagine you’re just a systems administrator, not a pentester. What would you do to figure out just how badly the user messed up in deployment? How could you trace steps?

39

Thanks everyone I got root… If anyone needs help im happy to help

40

I’ve obtained a user shell and have been looking through the logs/history but have been unable to identify anything that could escalate to root…

I have a shell on 2 users… can anyone give me a nudge into the right place? or PM me?