GlasgowSmile_Cron

Cron

---

PSPY has captured the root cronjob process that is executing the /home/penguin/SomeoneWhoHidesBehindAMask/.trash_old file every minute. Now that the lateral movement to the penguin user has been made, the file can be overwritten to gain code execution leveraging the root cronjob, under the security context of the root account.

Moving onto the Privilege Escalation phase.