After obtaining a reverse shell connection, a penetration tester runs the following command: www-data@server!2:sudo -1
User www-data may run the following commands on serverl2: (root) NOPASSWD: /usr/bin/vi
Which of the following is the fastest way to escalate privileges on this server?

Question

After obtaining a reverse shell connection, a penetration tester runs the following command: www-data@server!2:sudo -1

User www-data may run the following commands on serverl2: (root) NOPASSWD: /usr/bin/vi

Which of the following is the fastest way to escalate privileges on this server?

Felipe Huichacura · Accepted Answer

Executing the command sudo vi -c ' Jbash'

Felipe Huichacura · Answer

Editing the file /etc/passwd to add a new user with uid 0

Felipe Huichacura · Answer

Creating a Bash script, saving it on the /tmp folder, and then running it

Felipe Huichacura · Answer

Editing the file/etc/sudoers to allow any command

List of questions