Please don't leave root.txt extracted to ownership of lower privileged user after privesc

HTB Content Machines
1

thanks :stuck_out_tongue:

2

What do you mean? Each machine has root.txt, it’s proof you got the root/system account. They also have user.txt to prove you got user access.

3

Maybe they mean delete root.txt ?

4

I mean if you extract root.txt to another user with lower privileges, please don’t leave it there when your done :slight_smile: Or zip files, or scripts, etc. Would be nice if people deleted all that stuff when they’re done. Would also be nice if people restore wepapp settings to default if they changed something - otherwise it allows people to get code/command execution without knowing the proper settings.

5

Year right Snooby. Make sure to do house cleaning all of your exploit, scripts etc.

6

Be kind, please rewind! :slight_smile:

7

Ah, I see. Sounds like some chown activity, I haven’t seen that yet. The only way to fix it is to re-chown it as root or do a reset…which I doubt the person(s) responsible would do :anguished: It sounds like they just want root.txt output, and not get a shell…bah.