Sunset Sunrise(Vulnhub)

And found a weborf user MySQL password I try the password ssh connection and ssh connection is connect the password.

  • username: weborf
  • password: iheartrainbows44

Now connect the username and password ssh connection and successful connect ssh connection and got a weborf shell.

and got all username and password but root password is encrypted

  • second username and password
  • username: sunrise
  • password: thefutureissobrightigottawearshades

Privilege Escalation

When you run any command along with sudo users can execute specific commands under other users (also root) using their own passwords instead of user’s one or without password depending upon setting in /etc/sudoers file and we see wine application is sudoers file let’s exploit wine.





@Saksham Dixit

Related Posts

COMMENTS

Leave a Reply

Your email address will not be published. Required fields are marked *