Linux privilege Escalation methods
What is Privilege escalation? Privilege escalation is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application
Beginner Friendly Step-by-Step Methodology for Windows Privilege Escalation
Here is a beginner-friendly Windows privilege escalation methodology. This guide assumes you are starting with a very limited shell like a web shell, Netcat reverse
Windows Attack Anatomy
Incorrect permissions in services Find unquoted paths ClearText passwords Pass the hash AlwaysInstallElevated Port Forwarding Vulnerable drivers Kernal Exploits Automated tools Powersploit Metasploit Incognito Rottenpotato
Windows privilege escalation – part 3 | Kernal-Exploits
EoP – Kernel Exploitation List of exploits kernel : https://github.com/SecWiki/windows-kernel-exploits #Security Bulletin #KB #Description #Operating System MS17-017 [KB4013081] [GDI Palette Objects Local Privilege Escalation] (windows 7/8) CVE-2017-8464 [LNK Remote Code Execution Vulnerability] (windows
Local Active Directory Implementation -2
Step 20:- Once you log in to the admin account. Click on Start and then go to Administrative Tools. Then click on Active Directory Users
CHEATSHEET – LFI & RCE & WEBSHELLS
Basic LFI In the following examples, we include the /etc/passwd file, check the Directory & Path Traversal chapter for more interesting files. http://example.com/index.php?page=../../../etc/passwd Null byte ⚠️ In versions of PHP
WebShells & Exploitation – LFI to RCE
Commands can be sent to the web-shell using various methods, with HTTP POST request being the most common. However, hackers are not exactly people who
Web Shells & Exploitation Fundamentals
A web-shell is a malicious script used by an attacker with the intent to escalate and maintain persistent access on an already compromised web application.
Linux detailed Enumeration – Commands
This blog is largely forked from the g0tmi1k’s blog https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ Thanks, G0tm1lk for your amazing contribution to the industry. Operating System What’s the distribution type? What
Linux Privilege Escalation Tools & Techniques
In this blog, we will discuss about different Linux privilege escalation techniques & Methodologies. Tools LinuxSmartEnumeration – Linux enumeration tools for pentesting and CTFswget “https://raw.githubusercontent.com/diego-treitos/linux-smart-enumeration/master/lse.sh”