Cct2019 Tryhackme ~repack~ ⚡

[Install] WantedBy=multi-user.target

cat /home/mandy/user.txt Check sudo -l again as mandy – maybe mandy can run something as root. cct2019 tryhackme

Read user.txt :

User www-data may run (ALL, !root) /bin/systemctl That means www-data can run systemctl as any user . 4.2 Exploit systemctl Create a service file (e.g., privesc.service ): [Install] WantedBy=multi-user