Linux

Cheatsheet

Basic Linux Privilege Escalation - g0tmi1k

Sudo Rights (sudo -l)

Linux Privilege Escalation using Sudo Rights - Hacking ArticlesHacking Articles

SUID (Set user ID) Binaries

Linux Privilege Escalation using SUID Binaries - Hacking ArticlesHacking Articles

rbash (restricted shell)

SSH login to bypass the loading of profile and access proper bash

ssh ignite@192.168.1.103 -t "bash --noprofile"

Multiple Methods to Bypass Restricted Shell - Hacking ArticlesHacking Articles

Processes executed by Root

TMUX session

hype@Valentine:/dev/shm$ ls -la /.devs/dev_sess
srw-rw---- 1 root hype 0 Apr 27 01:12 /.devs/dev_sess

hype@Valentine:/dev/shm$ groups
hype cdrom dip plugdev sambashare

tmux -S /.devs/dev_sess