privilege escalation

SUID

Using linpeas.

Result:

SSH root

In the ssh directory, I found a root ssh key.

I will try to connect this.

cd .ssh
cd keys
ls

I will try to connect to root using this ssh key.

ssh -i root [email protected]

This is causing an error because the SSH client is trying multiple keys before using the specified one. This can lead to delays or authentication issues.

So, We will specify IdentitiesOnly=yes to connect to using only the specified key.

ssh -i root [email protected] -o "IdentitiesOnly=yes"

We got the root shell.