Tryhackme Cct2019 ((link))
echo "cp /bin/bash /tmp/rootbash; chmod +s /tmp/rootbash" > /home/mandy/backup.sh
Have you completed the TryHackMe CCT2019 room? Share your favorite technique or the part where you got stuck in the comments below. Happy hacking! tryhackme cct2019
The next step is to identify potential vulnerabilities on the target system. We notice that the FTP service is running on port 20, and a quick search on the internet reveals that the version of FTP running on the VM is vulnerable to a buffer overflow attack. Additionally, the HTTP service on port 80 appears to be running a web application that may be vulnerable to SQL injection. echo "cp /bin/bash /tmp/rootbash