@sparkla said:
Try
locate user.txt
Maybe that helps to understand my question.
Ok - so having tried this I might have a better idea what you mean.
Somethings to consider:
- locate is (at least in my experience) really hit and miss. It frequently misses file on my local system because I dont keep the database up to date.
- each user account has set privs, if the account you are in doesn’t have privs to see the file, you might not be able to find it with other tools. Keep in mind what account is being used by which “exploit.”
- If you use the second account via the first bit, the output is muddy so it isn’t great for broad searching (targeted enumeration still works).
On this box, there is no need to hunt the flags. They are exactly where they should be.