Splodge_sudo_privileges_thesplodge

thesplodge

---

Checking for sudo privileges of the thesplodge user after making the lateral movement

[thesplodge@splodge .pgdata]$ sudo -l
Matching Defaults entries for thesplodge on splodge:
    !visiblepw, always_set_home, match_group_by_gid, always_query_group_plugin,
    env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS",
    env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE",
    env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES",
    env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE",
    env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY",
    secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin
 
User thesplodge may run the following commands on splodge:
    (ALL) NOPASSWD: /bin/bash

The sudo -l command does not prompt for password. The thesplodge user is able to execute the /bin/bash command as anyone without getting prompted for password Moving on to the Privilege Escalation phase