CTF Walkthrough: Eavesdropper (TryHackMe, Medium Difficulty)

This is a CTF walkthrough of the box "Eavesdropper" on TryHackMe. This box demonstrates how commands entered into the terminal are not very secure. Commands can easily be grabbed with a simple bash script, even when obfuscated by the terminal. Writeups are available on my github: https://github.com/CTF-Walkthroughs/C... Previous CTF tutorial videos and writeups available at: https://www.benreitz.com tags: ctf, ethicalhacking, TryHackMe, exploit, enumeration, pspy Chapters: 0:00 Intro 2:55 pspy recon tool 4:44 modify the PATH variable 6:04 bash script to grab sudo password 7:16 catch the sudo password 7:43 root flag 8:05 wrap-up