Misconfigured Cron Jobs
Linux privilege escalation lab involving a combination of cron job abuse and sudoers abuse, accessible exclusively via SSH. Log in using the credentials `jprhack` / `jprhack_p@newd!`. Move laterally to the `carlos` user by exploiting a cron-based backup script—which can be modified by the `it` group (to which `jprhack` belongs)—and then, as `carlos`, leverage a misconfigured sudoers permission for `php` (similar to previous labs involving sudoers/GTFOBins abuse) to escalate to `root` and read the flag located at `/root/flag.txt`.
# 1. Extract the archive you just downloaded — on your own box, not a server.
you@host:~$ unzip misconfigured-cron-jobs.zip && cd misconfigured-cron-jobs
# 2. Boot the vulnerable machine. It prints the IP it was assigned.
you@host:~$ sudo bash deploy.sh misconfigured-cron-jobs.tar
# 3. Point your tools at that IP. Ctrl+C here tears it back down when you're done.
Submit flags
Log in to submit flags and track your progress.