Privilege Escalation

Linux

Things to try:

  1. Search Kernel Exploits (reffer to CVE Ressources)

  2. Check SUDO permissions

  3. SUID

  4. Capabilities

  5. Cron jobs

  6. PATH abuse

  7. NFS

SUDO

  • Check if user has sudo rights with:

sudo -l
  • If there is, you can compare list of sudo allowed binaries to the list of sudo vulnerable on GTFOBins.

Ressources

  • GTFOBins: Use this to find which software can be use to bypass security and escalate privileges.

Scripts

  • LinPEAS - Linux Privilege Escalation Awesome Scripts

  • LES - Linux Exploit Suggester

Last updated