SHREK - Privilege Escalation

HTB Content Machines
, ,
1

Got user.
Enumerated with LinEnum.sh, found possible root pwnage directive.
Just want to know if i’m going in the right direction.
I am not able to switch to the other user, any nudge would be helpful.

2

What LinEnum.sh told you is that you can run a certain command as another user without a password, now there’s a reason why this particular command is interesting from your perspective, think of its possibilities

3

@Maz0r said:
What LinEnum.sh told you is that you can run a certain command as another user without a password, now there’s a reason why this particular command is interesting from your perspective, think of its possibilities

So basically I have to pivot to ‘that’ user and run that particular command. Is there a direction you can point me to switch to ‘that’ user, i know the post exploitation after that

4

for change user use sudo -u (username) (path of user)

5

there is another thread about shrek with hints.