↓Skip to main content

RBASH

OFFSEC - Proving Grounds - PEPPO

14 September 2025·1634 words·8 mins

OFFSEC PG PRACTICE IDENT-USER-ENUM RBASH ED PWNKIT

Ident on port 113 reveals process owner eleanor on port 10000. SSH access via weak credentials to get initial access in rbash, escape rbash using ed, set PATH and exploit pwnkit (CVE-2021-4034) to gain root.