A city Linux foothold reveals a cleartext password in a world-readable shell history file. How should the tester treat that discovery during privilege escalation?
Select an answer to reveal the explanation.
Short Explanation
Shell history is the sticky-note drawer of Linux—people stash passwords there without meaning to. Finding one in a world-readable history is real credential loot for hopping accounts, not junk. Use it carefully inside scope; it does not green-light mass AD resets.
Full Explanation
World-readable histories, backup configs, and similar files commonly retain reusable credentials. In privilege-escalation work, credential discovery is a first-class enumeration outcome that can escalate local access or enable lateral movement within scope. It does not authorize unbounded directory password resets and is not direct evidence about full-disk encryption. Document the source file and validate reuse only against in-scope targets.