@chicxulub said:
@TazWake I know, it’s wild, it has been stumping me for quite some time.
Yeah I will insert my nc one liner into the file, trigger it, pop a shell and it will be sysadmin again. It works every time using any of the four or five files that are there.
Ok, something isn’t working correctly.
But when I try to do the same thing like cp the flag to a different location or add my ssh to the root location, I receive that permission denied message. I am going to try and watch it, I thought about doing that earlier but didn’t do it. That may be the key. Maybe it is in fact working sometimes, I just am not realizing it.
The attack needs to be in the correct place and triggered in the correct way for it to work. It should be simple but as is so often the case, that just means lots of things can still go wrong.