bash1 min read
Linux privilege escalation via misconfigured cron jobs
Find cron jobs running as root that reference writable files, then inject a reverse shell or payload into those files.
- #linux
- #cron
- #privesc
- +2
Cybersecurity · Exploitation
Privilege Escalation
Going from a low privilege shell and foothold to root or SYSTEM accounts.
7 snippets
bash1 min read
Linux kernel privilege escalation
Identify kernel version, find matching CVEs with linux-exploit-suggester, compile and run the exploit to reach root.
- #linux
- #kernel-exploitation
- #privesc
bash1 min read
Linux SUID binary exploitation
Find binaries with the SUID bit set owned by root, and exploit misconfigured ones to get a root shell.
- #linux
- #suid
- #privesc
msfconsole1 min read
Windows kernel privilege escalation
Find missing patches with WES-NG or Windows Exploit Suggester, then run the matching kernel exploit to reach SYSTEM.
- #windows
- #kernel-exploitation
- #privesc
- +1
msfconsole1 min read
Windows access token impersonation
Use Metasploit's Incognito module to list and steal a higher-privilege token from another process on the target.
- #windows
- #token-impersonation
- #privesc
- +2
msfconsole1 min read
Windows UAC bypass
Bypass the UAC prompt to execute payloads with elevated privileges.
- #uac-bypass
- #windows
- #privesc
- +3
bash1 min read
Windows: hunting for passwords in config files
Find and decode cleartext admin credentials left behind in Windows Unattended Setup files.
- #windows
- #credential-hunting
- #unattended-install
- +2
Nothing matches these filters.