"Amsterdam": Cron Hijack

[chapristi]

For the last medium hacking challenge, we went through a cron job privilege escalation. I liked this challenge before I discovered that the root user had /home/admin:/usr/local/bin:/usr/bin:/bin as PATH :) Just kidding. The solution felt a bit too guessy for me. Otherwise, it was a very interesting challenge since it's not the typical privesc you see everywhere; it forces you to look into places you wouldn't usually check.

[fduran]

@chapristi agree that the solution is guessy/unrealistic, maybe a tip in the description is needed