So it's harder to further next escalation is password reuse, so if you before getting any reversal,
you may have face some current are usernames or something.
So if you gain any credentials, you try to use them.
Uh, if that user will have the room privileges.
So you can always use the, uh, gather credentials.
OK, and also you can sit in the home territory.
That is the best.
So generally a normal testing this file can be labeled so you cannot treat.
This fight, so sometimes it may be the intentional way to get the route.
So are you today.
Uh, she got started, so it will be are the contents of the first.
That is the natural history and history, etc. And so you can see, uh, this is my previous comment
and, uh, and you can see there is a MySQL connection to the host and the user is rude and the password
is.
So that means this some horse, not Rockall, maybe our own IP address.
Also, let's get see if she.
Was.
So they're to be in the role of any other local address and some not local.
So you can bring that if I think it's our own.
So what you can do is you can say suru switch to root and type the password password one, two, three.
So you can do that so you can see we are successful.
So there is a username and password nerdish profile.
So now let's add zip.
So we have some of the profile.
You can also be the content of the.
And you can see there is a connection and then other users pass, the credentials are stored in this
order.
Let's get you the contents of the two can see the root password and the password so you can use this
to switch to register.
And another thing you can do is you can go to the router three and you can search for any hidden files.
So 105 you can do is not a sausage.
So if you have the private key access, then you can use that to logging into the register without any
password.
Let's go to the directory.
That's a less minister.
So you can see how that relaxes, OK?
So that means we need to set the currency for and see it more in case if you have the right access unit.
So that means this is it.
Uh, ID only works with this, uh, four zero zero all the through permissions.
So in this case, it's not required because we have one to permissions.
So now with this, uh, ID you can use I to identify this rootkit and then you can see a route at this
IP address.
It's sort of been copied, this IP address and paste here.
And say yes, and you can see we the root, so in this way you can root the passwords we have and you
can also search for any files that is having something, any juicy information.
So always check for the user passwords and take for match three and and these private keys and also
any other suspicious files that can also hold to that passwords.
So you can also go to the city where available w the less CDH diamond the less so generally there is
only one had offer in case PSP is installed on this box, then it can in some configuration files.
So you can also view those configuration files to get any juicy information like log in to MySQL, etc..