Hi, within this lecture, we're going to focus on pseudo list or pseudo dash l and we have seen this
technique before during the CTF solving in the previous sections.
But I believe we have to recap this one more time in order to truly understand what we can do with this.
So far, we know that once we get the user, once we hack into a system, we can run pseudo the shell.
OK, so let me run this and see what we can do over here.
So once we do this, we can see what kind of things or what kind of binaries that we can execute over
here.
And we can do this without giving a password.
So maybe we can get this in some kind of servers or in some kind of Pentax.
Maybe we don't get this, but it's worth a shot.
So once we do that, it's even not guaranteed to become root using one of these binaries or one of these
programs over here.
But again, we can search for it and we can see what we can do with it.
OK, so even though it's not guaranteed, make sure you run pseudo.
I'll just take it in your notes.
OK, one of the first things that you should do once you become a user or worse, you just hack into
a system.
And we have seen this thing right.
We have seen and met before and we have used an app to become root.
So, for example, let me just do this one more time.
Let me see if we can run this with pseudo comment.
As you may have already know, pseudo means super user do.
And we actually run any of the binaries with a escalated privilege, of course, if we have the permission.
For example, if I run this, as you can see, it gets executed.
Since I didn't provide any of the parameters that I should, it just displayed me the hub documentation.
But again, it's enough because I know I can run this, so maybe I can just use the interactive mode
that we have seen before and just run exclamation mark S.H. in order to get a shell back from root.
So maybe you remember that it was very easy.
And actually at that time I didn't know that we just Googled it and found it.
OK, so let me show you what I mean.
We can come over here and say Dash Dash interactive.
So maybe you have skipped that lecture and once you go into the command line of a map, you can run
anything you want.
And if you want, if you run just this, then you get a callback and I say show.
And over here, if you run it, as you can see, we are route.
If you're on, who am I?
You get route back.
So far, so good.
As you can see, we became route by using the N map over here.
So maybe you didn't know and map does that and map.
Let's said of course you can Google it out and find it OK.
And I have shown you have to do that in the previous sections.
So I'm going to go out of this by running exit.
OK, so I'm going to run exit one more time and we are back in user so I'm going to run through the
URL one more time.
And here we have some other tools as well.
I don't think we can use find, for example, in order to become route, but maybe we can use them.
As we have already seen in the Bendat section, Vem has its own command line as well.
So we can't use Vim and try to become route.
For example, we can just say pseudo user being whim.
And over here, in order to use the command line of them, we can just say Dachsie and this is the command
that we are going to execute.
We were writing design between single quotation marks.
OK, all you got to do is actually run by Bashar S.H. whether we worked for you in that case.
OK, so come over here and just say exclamation mark and being as h for example, let's see if we get
the NHL back.
So here we are.
Let me around.
Who am I?
And here we are route.
As you can see, it's very easy if you know what you're doing and most of the time, more, more and
often you you will see those things because many times administrators are too lazy to implement the
security features and they just let it run with pseudo.
They think that nothing is going to happen.
But more than often something's.
Going to happen over here if the hacker knows what he's doing.
OK, so here we have the Apache to and others here as well.
Maybe you can search for them online and see if there is any way to become rude using Apache, for example.
And we are inside of the.
I'm going to say, Colin two exclamation mark and hit enter to exit out of this one.
And here we are.
So I'm going to stop here and continue within the next lecture.