App - Script

Hi,

The objective seems kind of vague. Is the goal to gain root access and then provide the root password as validation?

Thanks

I believe the objective is to get access to the .flag file. And then validate with the entry within the .flag file

Below are the permissions for the home directory of this challenge:

dr-xr-x--- 4 app-script-ch1-cracked app-script-ch1 4096 May 25 13:16 ./
drwxr-xr-x 13 root root 4096 Aug 11 16:26 ../
dr-xr-x—x 2 app-script-ch1 app-script-ch1 4096 Jan 8 2015 ch1/
dr-xr-x—x 2 app-script-ch1-cracked app-script-ch1-cracked 4096 May 25 13:17 ch1cracked/
– rw-r----- 1 app-script-ch1 app-script-ch1 217 May 25 13:16 readme.md

And below are the permissions for ch1 directory:
– rw-r----- 1 app-script-ch1 app-script-ch1 92 Jan 8 2015 shared_notes

According to above file and directory permissions I should be able to edit the shared_file in ch1 directory but still I can’t. Can someone explain me why? Its showing me readonly when i open it in vim.

you don’t have to get root access. read the related sources, you can find the solution there.
just look at who owns the file you want to read... and look at what your user can do...

I get that my user can only execute cat and cd without the help of sudo, and I know that you use -u or -g to change users or groups, but I have no I idea what to do given the fact that everytime I use sudo it asks for a password that I don’t know.

You know one password. The proof is that you’ve been able to login via SSH.
I’m certain you already did it — otherwise you wouldn’t come here and ask for help would you ? — but, read the manual a second time.

Removed

What manual zM ? can you explain more please ?

After listing what commands I could do, it appeared I could only cat a file that was talking about networking IP assignment, from there it doesn’t seem it still talks about file permissions anymore? Am I on the right path?