Today, SU has encountered a very interesting issue about privilege escalation.

Author: enterer blog:Www.enterer.cn

Take a closer look at the following picture. Have you found anything. SU's Elevation of Privilege can overflow, but an error occurs. The cmd command is not restricted. Note that

Recv: 530 Not logged in, home directory does not exist.

The online explanation is:

530 Not logged in, home directory does not exist

It usually appears when a user logs on. It means that the root directory of the user does not exist.

Check the user carefully to see if the role has been configured. If the role does not exist, it is obviously a problem.

Then, check the setting of the FTP root directory in the corresponding role to see whether the Path entered in this setting exists on the ftp server.

If the problem persists, pay attention to the following three points:

1. After modifying the role settings, restart servu to take effect.

2. if the path is on an ntfs disk, ensure that the ftp server has the permission to access the path.

3. If the local directory security parameter is set, the path must be within the path range set in the security directory.

Yes, I uploaded an asp webshell and found that there is no drive C.

So we need to change the permission escalation using su at this time.

Then we won the server smoothly, and we were very sorry to find it. You have no drive C on your meow server.