BoilerCTF_sudo_privilege_stoner

stoner

---

Checking for sudo privileges of the stoner user after making the lateral movement

stoner@Vulnerable:~$ sudo -l
User stoner may run the following commands on Vulnerable:
    (root) NOPASSWD: /NotThisTime/MessinWithYa

The stoner user is able to execute /NotThisTime/MessinWithYa as the root account without getting prompted for password

/NotThisTime/MessinWithYa

---

stoner@Vulnerable:~$ cat /NotThisTime/MessinWithYa
cat: /NotThisTime/MessinWithYa: No such file or directory
 
stoner@Vulnerable:~$ ls /NotThisTime/MessinWithYa
ls: cannot access '/NotThisTime/MessinWithYa': No such file or directory

/NotThisTime/MessinWithYa doesn’t exist

stoner@Vulnerable:/$ mkdir NotThisTime
mkdir: cannot create directory ‘NotThisTime’: Permission denied

Current user is unable to write to the system root