I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability:
When I'm inside the machine I want to get the root privilege with my user, by default Shellshock doesn't gives you the root user, but I want to transform my user to the root privileges, I've tried this with
sudo controls but my shell meterpreter doesn't recognize that command options, is there an alternative way of get the privileges of the root with the user that I obtain in Metasploit?
Could be a working option change the user that I have (consulting
getuid) to 0:0 in the
/etc/passwd password fields in the file?