O'quv darsi / Exploitation va Post-Exploitation

Linux Privilege Escalation

user → root: SUID, sudo misconfig, kernel exploit, cron.

30 daq.ilg'or4 komanda2/4

Dars holati

Davom etmoqda

Amaliy komandalar0/4

Streak saqlash uchun kiring

Maqsadlar

LinPEAS
GTFOBins
sudo -l tahlil

Faqat ruxsat etilgan muhitda mashq qiling

Bu darsdagi buyruqlar o'quv simulyatori va o'zingizga tegishli lablar uchun. Begona tizimlarni skanlash yoki sinash qonuniy javobgarlikka olib keladi.

Komandalar

Run tugmasi buyruqni o'ngdagi simulyatorga yuboradi; Copy esa real Kali terminalingiz uchun.

$./linpeas.sh | tee out.txt

$sudo -l

$find / -perm -u=s -type f 2>/dev/null

$# https://gtfobins.github.io/ — har bir SUID binary uchun

Oldingi dars Keyingi dars