5 box enum PEAS
â•£ Active Ports
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
â•£ Checking 'sudo -l', /etc/sudoers, and /etc/sudoers.d
Matching Defaults entries for www-data on bottleneck:
env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
User www-data may run the following commands on bottleneck:
(bytevsbyte) NOPASSWD: /var/www/html/web_utils/clear_logs
â•£ Users with console
bytevsbyte:x:1000:1000:bytevsbyte:/home/bytevsbyte:/bin/bash
root:x:0:0:root:/root:/bin/bash
â•£ PHP exec extensions
drwxr-xr-x 2 root root 4096 Sep 25 2019 /etc/nginx/sites-enabled
drwxr-xr-x 2 root root 4096 Sep 25 2019 /etc/nginx/sites-enabled
lrwxrwxrwx 1 root root 29 Sep 25 2019 /etc/nginx/sites-enabled/bottleneck -> ../sites-available/bottleneck
Last updated