http://bin.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/HTB/Medium/6.html
Part 3 : Getting Root Access In order to privesc we first have to take a look at that backups file : mitsos@LazyClown:~$ ls
backup peda user.txt
mitsos@LazyClown:~$ file backup
backup: setuid, setgid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.24, BuildID[sha1]=33d6b5bec96c44e630f37ff41cc1c4a8b2813b6b, not stripped
mitsos@LazyClown:~$ strings backup | grep cat
cat /etc/shadow upon closer inspection, we see...