Privilege Escalation

Linux

Things to try:

1. Search Kernel Exploits (reffer to CVE Ressources)

2. Check SUDO permissions

3. SUID

4. Capabilities

5. Cron jobs

6. PATH abuse

7. NFS

SUDO

• Check if user has sudo rights with:

sudo -l

• If there is, you can compare list of sudo allowed binaries to the list of sudo vulnerable on GTFOBins.

Ressources

• GTFOBins: Use this to find which software can be use to bypass security and escalate privileges.

Scripts

• LinPEAS - Linux Privilege Escalation Awesome Scripts

• LinEnum

• LES - Linux Exploit Suggester