Linux Privilege Escalation > Sudo

HTB Content Academy
, ,
1

I’ve transferred Baron Samedit to the target, but can’t use the make command there. Making locally, transferring and running on the remote doesn’t work. Wrong libraries.

I have root access to ncdu but I can’t find a way to exploit that.

Anyone know how to solve this one?

EDIT: So I went the long way around, created an Ubuntu focal container, made the sudo-hax-me-a-sandwich from there. Uploaded it to the box and was now able to run it, but after “praying for a rootshell” I get the error “Sorry, user htb-student is not allowed to execute ‘sudoedit AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA’ as root on ubuntu.”

1 Like
2

Got it. Found that there really is a way to use that second method after all.

Took a while to find the ‘b’ option in that one app from sudo -l :wink:

4 Likes
3

i did sudo -l and i found ncdu, id there anyway to exploit it ? thanks

1 Like
4

The second method, Rrrgang is saying.
Keep in mind your ncdu command is not proper ncdu.
Try to check the path.
which ncdu

1 Like