Tomghost_sudo_privileges_merlin

merlin

---

Checking for sudo privileges of the merlin user after making the lateral movement

merlin@ubuntu:~$ sudo -l
Matching Defaults entries for merlin on ubuntu:
    env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
 
User merlin may run the following commands on ubuntu:
    (root : root) NOPASSWD: /usr/bin/zip

The merlin user is able to execute /usr/bin/zip as the root account

zip

---

Moving on to Privilege Escalation phase