Priv Esc

freakingrockstarontheroad
ike@expressway:~$ id
uid=1001(ike) gid=1001(ike) groups=1001(ike),13(proxy)
ike@expressway:~$ ls -l /var/log/squid
total 20
-rw-r----- 1 proxy proxy 4778 Jul 23 01:19 access.log.1
-rw-r----- 1 proxy proxy   20 Jul 22 19:32 access.log.2.gz
-rw-r----- 1 proxy proxy 2192 Jul 23 01:47 cache.log.1
-rw-r----- 1 proxy proxy  941 Jul 23 01:47 cache.log.2.gz
ike@expressway:~$ cat /var/log/squid/access.log.1
<SNIP>
1753229688.902      0 192.168.68.50 NONE_NONE/400 3896 GET / - HIER_NONE/- text/html
1753229688.902      0 192.168.68.50 NONE_NONE/000 0 - error:transaction-end-before-headers - HIER_NONE/- -
1753229688.902      0 192.168.68.50 TCP_DENIED/403 3807 GET http://offramp.expressway.htb - HIER_NONE/- text/html
1753229689.010      0 192.168.68.50 NONE_NONE/400 3896 OPTIONS / - HIER_NONE/- text/html

ike@expressway:~$ ss -anp | grep 127.0.0.1
RTNETLINK answers: Invalid argument
tcp   LISTEN 0      20                                                  127.0.0.1:25               0.0.0.0:*

❯ echo 10.10.11.87 expressway.htb offramp.expressway.htb | sudo tee -a /etc/hosts
[sudo] password for adot:
10.10.11.87 expressway.htb offramp.expressway.htb

Custom sudo binary

-h for host???

PreviousFootholdNextCredentials

Last updated

Was this helpful?