josh
Checking for sudo privileges of the josh user after making a Lateral Movement
josh@cozyhosting:~$ sudo -l
[sudo] password for josh:
matching defaults entries for josh on localhost:
env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin, use_pty
user josh may run the following commands on localhost:
(root) /usr/bin/ssh *The josh user is able to execute /usr/bin/ssh * as the root user
according to the gtfobins, SSH can be used to elevate privileges if configured to run by sudo
Moving on to the Privilege Escalation phase