Red/Blue Cheatsheet | NORI ZAMURAI
search
⌘Ctrlk
Red/Blue Cheatsheet | NORI ZAMURAI
  • Introduction
  • Pentesting Cheatsheets
    • Reconnaissance
    • Enumeration
    • Privilege Escalation
      • Linux
      • Windows
    • Shell
    • Password Crack
    • Exploit
    • Paylaod
    • File Transfer
    • Port Forwarding
    • Service Login and Interaction
  • Useful Commands
    • Linux Commands
    • Powershell
    • CMD
    • Python
    • Editor: Vi & Tmux
    • Metasploit
    • Powershell Empire
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. Pentesting Cheatsheetschevron-right
  2. Privilege Escalation

Linux

hashtag
Cheatsheet

LogoBasic Linux Privilege Escalation - g0tmi1kblog.g0tmi1k.comchevron-right

hashtag
Sudo Rights (sudo -l)

LogoLinux Privilege Escalation using Sudo RightsHacking Articleschevron-right

hashtag
SUID (Set user ID) Binaries

LogoLinux Privilege Escalation using SUID BinariesHacking Articleschevron-right

hashtag
rbash (restricted shell)

hashtag
SSH login to bypass the loading of profile and access proper bash

LogoMultiple Methods to Bypass Restricted ShellHacking Articleschevron-right

hashtag
Processes executed by Root

hashtag
TMUX session

PreviousPrivilege Escalationchevron-leftNextWindowschevron-right

Last updated 5 years ago

  • Cheatsheet
  • Sudo Rights (sudo -l)
  • SUID (Set user ID) Binaries
  • rbash (restricted shell)
  • SSH login to bypass the loading of profile and access proper bash
  • Processes executed by Root
  • TMUX session
ssh [email protected] -t "bash --noprofile"
hype@Valentine:/dev/shm$ ls -la /.devs/dev_sess
srw-rw---- 1 root hype 0 Apr 27 01:12 /.devs/dev_sess

hype@Valentine:/dev/shm$ groups
hype cdrom dip plugdev sambashare

tmux -S /.devs/dev_sess