Healthy Family | Healthy World
Healthy Family | Healthy World
unzip backup.zip Inside the unzipped directory, you'll find a file called dinosaur.cfg . This file contains credentials:
nmap -sV <machine_IP> Replace <machine_IP> with the IP address provided by TryHackMe. jurassic park tryhackme
sudo python /usr/bin/jurassic Create a new Python script to exploit this: unzip backup
sudo python jurassic.py This will give you a root shell. In this task, we'll continue to escalate privileges. Step 1: Root Access You've already obtained a root shell. Now, find the root.txt flag: In this task, we'll continue to escalate privileges
sudo -l This will list the commands that can be executed with sudo privileges. Notice that the park user can execute the following command with sudo privileges:
http://<machine_IP> You'll see a simple web page with a "Welcome to Jurassic Park" message. Perform directory bruteforcing using a tool like dirbuster or gobuster :