So, a while ago I left a raspberry pi at my parents house, with their permission, intending to use it as a VPN connection since they live in a different country.
Problem is, I didn't know I had to enable Sudo over SSH. So now I can SSH onto it, but can't run Sudo. So I can't install anything, like OpenVPN.
My parents are not literate enough to help. How can I do this?
Edit: PRETTY_NAME="Raspbian GNU/Linux 11 (bullseye)"
Linux raspberrypi 6.1.21-v7+ #1642 SMP Mon Apr 3 17:20:52 BST 2023 armv7l GNU/Linux
Raspberry Pi 2 Model B Rev 1.1
Installed is the raspian desktop, and Zerotier for the SSH login.
6 Comments
turdas@suppo.fi · 4 pts · 78d
Depending on how old and out of date it is, you may be able to get root easily with the Dirty Frag POC https://github.com/V4bel/dirtyfrag/blob/master/README.md#exploiting
Evil_Incarnate@sopuli.xyz · 1 pts · 78d
Thanks, but it failed.
turdas@suppo.fi · 2 pts · 78d
Oh yeah, that's probably because RPi is ARM and the POC is designed for x86. You'll have to try and find an ARM version, if one exists.
Evil_Incarnate@sopuli.xyz · 1 pts · 78d
Found the arm version but it still failed (rc=1)
ExperimentalGuy@programming.dev · 2 pts · 71d
What OS and what version is it running? Besides a VPN, are there other services your RPi is running?You should run an nmap scan of the device or try a vulnerability scanner like OpenVAS.
ExperimentalGuy@programming.dev · 2 pts · 71d
Oh I also realized that you can log in too. You can also cross reference different programs you can run as a user against CVE registries of those programs at the same version or less.