sunset: 1

[ vulnhub  boot2root  walkthrough  ]

Goal

root

Download

https://www.vulnhub.com/entry/sunset-1,339/

Walkthrough

nmap
alt text

ftp anonymous works
alt text

downloaded backup file contains hashed creds
alt text

clean up of the credentials file
alt text

run against hashcat and we have credentials
alt text
alt text

ssh as sunset works and user flag
alt text
alt text

sudo with no pass for /usr/bin/ed
alt text

able get root
alt text

and root flag
alt text

Written on September 6, 2019
Share on: