https://wearethebug.dev/tags/bash-script/Recent content on WE ARE THE BUGTradecraften-usSat, 10 Jun 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-bamboo/Sat, 10 Jun 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-bamboo/Bamboo is an medium-rated Linux machine that begins with discovering a Squid proxy. The proxy is used to scan internal ports and reveals a PaperCut NG instance. A known PaperCut vulnerability CVE-2023-27350 is exploited to gain a foothold. Local enumeration reveals a writable directory containing a script that runs with root privileges. By modifying the script, we obtain a shell as root.