I've recently read here an answer from a user about the way he hacked a server in a CTF contest. At some point in the description, he said that he did sudo vim
and then spawned a shell via VIM using the password he captured before (i'm supposing he did :!bash
in vim).
I'm a bit confused why he used this specific vector to spawn a shell... He could had simply executed a sudo bash
.
Why using Vim to do this?