Difference between revisions of "Linux Privilege Escalation"

From Void-Byte
Jump to navigation Jump to search
Line 1: Line 1:
 
===Find Binary Permissions & Capabilities===  
 
===Find Binary Permissions & Capabilities===  
 
$ find / -type f -perm -u=s 2>/dev/null; getcap -r / 2>/dev/null <br><br>
 
$ find / -type f -perm -u=s 2>/dev/null; getcap -r / 2>/dev/null <br><br>
Capabilities that can give you root:<br>
+
'''Capabilities that can give you root:'''<br>
 
setuid+ep<br>
 
setuid+ep<br>
 
setgid+ep<br><br>
 
setgid+ep<br><br>
  
Helpful links for further research:<br>
+
'''Helpful links for further research:'''<br>
 
https://gtfobins.github.io/  <br>
 
https://gtfobins.github.io/  <br>
 
https://www.man7.org/linux/man-pages/man7/capabilities.7.html  <br>
 
https://www.man7.org/linux/man-pages/man7/capabilities.7.html  <br>

Revision as of 10:25, 11 November 2020

Find Binary Permissions & Capabilities

$ find / -type f -perm -u=s 2>/dev/null; getcap -r / 2>/dev/null

Capabilities that can give you root:
setuid+ep
setgid+ep

Helpful links for further research:
https://gtfobins.github.io/
https://www.man7.org/linux/man-pages/man7/capabilities.7.html