vagrant
Checking for sudo privileges of the vagrant
account after making the lateral movement
vagrant@ubuntu-xenial:/var/www$ sudo -l
Matching Defaults entries for vagrant on ubuntu-xenial:
env_reset, mail_badpass,
secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
User vagrant may run the following commands on ubuntu-xenial:
(ALL) NOPASSWD: ALL
The vagrant
account is basically the root
account
Moving on to the [[Blogger_Privilege_Escalation#|Privilege Escalation]] phase