[Renamon]

Hey guys, hope you're doing well! I come here to ask you for help. I recently completed this "sql injection to shell II" on VulnHub, gaining a reverse shell to the web server. That shell is owned by www-data user. Can someone explore that box and tell if it is possible and how to gain root privileges? (user privilege escalation).


Thank you.

[Money-]

Download Linpeas and have a look. You actually need to understand linux system and commands to actually understand the privilege escalation part btw.

[Renamon]

Download Linpeas and have a look. You actually need to understand linux system and commands to actually understand the privilege escalation part btw.

Yeah I poked around with Set UID binaries and tried to edit the nginx.conf file to use the root user on the web server but was unsuccessful. I also seem to be unable to download files when in the reverse shell (with wget, it gives an certificate error).

Thank you for the suggestion. I will look it up.