4 box enum dawn
dawn@dawn:~$ cd /home
dawn@dawn:/home$ ls -la
total 16
drwxr-xr-x 4 root root 4096 Aug 2 2019 .
drwxr-xr-x 18 root root 4096 Mar 16 2020 ..
drwxr-xr-x 5 dawn dawn 4096 Jul 22 2020 dawn
drwxr-xr-x 4 ganimedes ganimedes 4096 Aug 2 2019 ganimedes
SuidEnum
[#] SUID Binaries in GTFO bins list (Hell Yeah!)
------------------------------
/usr/bin/zsh -~> https://gtfobins.github.io/gtfobins/zsh/#suid
------------------------------
[$] Please try the command(s) below to exploit harmless SUID bin(s) found !!!
------------------------------
[~] /usr/bin/zsh
------------------------------
dawn@dawn:~$ sudo -l
Matching Defaults entries for dawn on dawn:
env_reset, mail_badpass,
secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin
User dawn may run the following commands on dawn:
(root) NOPASSWD: /usr/bin/mysql
Last updated