Capture the FlagMedium
From User to Root
Lab for Privilege Escalation: Vertical & Horizontal
Scenario
You have a foothold as `analyst`, but the flag is in /root/proof.txt, which you can't read. Enumerate your foothold (what are you allowed to run as root?) and use it to escalate.
Objective
Escalate from the analyst account to read a root-only proof file.
lab ~ from user to rootnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.