+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Elevating privileges on a VulnHub box (/showthread.php?tid=6255527)
Elevating privileges on a VulnHub box - Renamon - Nov 3, 2023
Hey guys, hope you're doing well! I come here to ask you for help. I recently completed this "sql injection to shell II" on VulnHub, gaining a reverse shell to the web server. That shell is owned by www-data user. Can someone explore that box and tell if it is possible and how to gain root privileges? (user privilege escalation).
Thank you.
RE: Elevating privileges on a VulnHub box - Money- - Nov 3, 2023
Download Linpeas and have a look. You actually need to understand linux system and commands to actually understand the privilege escalation part btw.
RE: Elevating privileges on a VulnHub box - Renamon - Nov 3, 2023
(Nov 3, 2023 05:58 PM)Money- Wrote: Download Linpeas and have a look. You actually need to understand linux system and commands to actually understand the privilege escalation part btw.
Yeah I poked around with Set UID binaries and tried to edit the nginx.conf file to use the root user on the web server but was unsuccessful. I also seem to be unable to download files when in the reverse shell (with wget, it gives an certificate error).
Thank you for the suggestion. I will look it up.