3 box enum dademola

PEAS

â•£ Cron jobs
/var/spool/anacron:
*/3 * * * * /root/git-server/backups.sh
*/2 * * * * /root/pull.sh

SHELL=/bin/sh
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root

â•£ Users with console
dademola:x:1001:1001::/home/dademola:/bin/bash
root:x:0:0::/root:/bin/bash
git:x:1005:1005::/home/git:/usr/bin/git-shell

â•£ Analyzing SSH Files (limit 70)
# user git has ssh files are in /home/git/.ssh/*

â•£ Searching unexpected auth lines in /etc/pam.d/sshd
auth      include   system-remote-login

â•£ Unexpected in root
/git-server

SSH as git

Previous4 fail privesc dademola-user git-repoNext2 :8080

Last updated