Capture the FlagMedium
Cron to Root
Lab for Cron Jobs for Privilege Escalation
Scenario
A job runs on this box as root every few minutes. If it calls a script you can edit, you own root. Enumerate the cron jobs, follow the root one to its script, and check who can write it.
Objective
Find the root cron job that runs a script you can write to, the privesc vector.
lab ~ cron to rootnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.