Misconfigured cron jobs PART 2
A sea-salt telemetry box with a careless two-person IT crew: a junior account can tamper with a coworker's own personal cron task to pull his SSH key out from under him, then ride a second cron job - this time root's - straight to a root shell. Two hops, two cron jobs, zero sudo.
# 1. Extract the archive you just downloaded — on your own box, not a server.
you@host:~$ unzip misconfigured-cron-jobs-part-2.zip && cd misconfigured-cron-jobs-part-2
# 2. Boot the vulnerable machine. It prints the IP it was assigned.
you@host:~$ sudo bash deploy.sh misconfigured-cron-jobs-part-2.tar
# 3. Point your tools at that IP. Ctrl+C here tears it back down when you're done.
Submit flags
Log in to submit flags and track your progress.