From f9a092edc01a94d83e887537512e177bd943fa4b Mon Sep 17 00:00:00 2001 From: l4rzy Date: Thu, 4 Jul 2024 15:36:34 -0500 Subject: [PATCH] post: offsec dc9 wip writeup update --- _posts/2024-07-01-offsec-labs-play-dc-9.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_posts/2024-07-01-offsec-labs-play-dc-9.md b/_posts/2024-07-01-offsec-labs-play-dc-9.md index 901b9c6..b870707 100644 --- a/_posts/2024-07-01-offsec-labs-play-dc-9.md +++ b/_posts/2024-07-01-offsec-labs-play-dc-9.md @@ -572,7 +572,7 @@ else : f.close() ``` -So we know that we can basically run `cp` as root. There are many ways to get root, let's append the sudoers file. +So we know that we can basically append to any file as root. There are many ways to get root, for example let's append the sudoers file. ``` fredf@dc-9:/etc/sudoers.d$ echo "fredf ALL=(root) NOPASSWD: /usr/bin/bash" > /tmp/conf