Penguin Land - Challenge, stuck on it

Help. I’m stuck on this challenge. I can not go past linPEAS T.T.

How the heck do I escalate privileges on this?

Please give screen capture of the commands your are trying and the output.

That’s the problem. I’ve tried Hydra, searching for known exploits on the web, but I literally got no clue where to go from the output on linPEAS nor the memo.txt that says user flag_one left some files on the desktop by mistake.

Unfortunately knowing he left the files doesn’t help me at all. I’ve found the files but don’t know what to do with them…

image_2024-11-17_194446229

These are the files

So instead of trying to brute force, maybe research what a swp file is and what you can do with it.

I will try to look into that, but the brute force was successful, the problem now is the suid exploit on base64, Ive been researching it but couldnt find a solution yet

I got through this challenge but not using the requested methods. I didn`t even go near a SSH key for flag2

Oh I bet you can crack this box a number of ways. However the SSH key is the planned path forward.

I`d like to try it again the correct method this time, but could you help me? Maybe an article on this matter would suffice for me to try it.

Well there is a note that talks about SSH. How could you use another persons SSH key? How might you get the key that you don’t have permission to access? Maybe there is a SUID binary to try?