Can anyone throw me a hint, I think I’m at the last step, I have access to the two users, and I can see user 1 has two binaries in their home area that can be executed with enhanced privs over what their account has.
What I just can’t get is the last step of using the T or O binaries to get the flag. I think I need the O file but I’ve tried reading the flags file as in as an input command but get access denied.