username: park password: L1a5hT9h Use the credentials to log in via SSH:
sudo -l This will list the commands that can be executed with sudo privileges. Notice that the park user can execute the following command with sudo privileges: jurassic park tryhackme
sudo python jurassic.py This will give you a root shell. In this task, we'll continue to escalate privileges. Step 1: Root Access You've already obtained a root shell. Now, find the root.txt flag: username: park password: L1a5hT9h Use the credentials to
unzip backup.zip Inside the unzipped directory, you'll find a file called dinosaur.cfg . This file contains credentials: Step 1: Root Access You've already obtained a root shell
import os os.system('/bin/bash') Save this script and execute it with sudo privileges:
ssh park@<machine_IP> In this task, we'll escalate privileges. Step 1: Enumeration Perform enumeration to gather more information about the system: