From 0f58a42c6df819b859e0ae1a6922393a987e05d2 Mon Sep 17 00:00:00 2001 From: Eldar Marcussen Date: Fri, 6 Dec 2013 01:45:17 -0500 Subject: [PATCH] Begining to document privilege escalation --- linux/privesc.md | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/linux/privesc.md b/linux/privesc.md index 1033b81..83f4b0f 100644 --- a/linux/privesc.md +++ b/linux/privesc.md @@ -1,3 +1,15 @@ -# Place Holder +# Sudo +Don't forget to check sudo to see if you can execute any commands with any privilege besides your user level +**Show which commands sudo allows you to run** +`sudo -l` -Content coming. Feel free to submit ;-) +# Find +The following commands are helpful when looking to exploit local applications for privilege escalation +**Finding world writeable directories** +`find / -perm 777` + +**Find setuid files** +`find / -perm +4000 -type f` + +**Find root setuid files** +`find / -perm +4000 -uid 0 -type f`