Potato_sudo_privileges_webadmin

webadmin

---

Checking for sudo privileges of the webadmin after making a manual system enumeration

webadmin@serv:~$ sudo -l
Matching Defaults entries for webadmin on serv:
    env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
 
User webadmin may run the following commands on serv:
    (ALL : ALL) /bin/nice /notes/*

The webadmin user is able to execute the /bin/nice /notes/* command as anyone

nice

---

According to GTFObins, nice can be abused for privilege escalation