من مستخدم بلا صلاحيات إلى Root على لينكس | ورشة تصعيد صلاحيات عملية | CTF-IED
CTF-IED
0:00 / 0:00
من مستخدم بلا صلاحيات إلى Root على لينكس | ورشة تصعيد صلاحيات عملية | CTF-IED
164 просмотра · 1 мес. назад
CTF-IED
89 подписчиков
164 просмотра · 1 мес. назад
A low-privilege shell to full root on a live Linux host, start to finish. This is the full recording of CTF-IED's hands-on Linux privilege escalation workshop.
We break in through an unprotected command-execution bug in a web app, catch and stabilize a reverse shell, and then walk the most common Linux privesc vectors one by one, pivoting from one user to the next until we land root: enumeration, writable cron jobs, SUID binaries and PATH hijacking, sudo misconfigurations and GTFOBins, Linux capabilities, service and library hijacks, and a writable /etc/passwd.
من شِل بصلاحيات محدودة إلى صلاحيات Root الكاملة على جهاز لينكس حي، عملياً وخطوة بخطوة.
🛠️ TOOLS USED
linpeas, pspy, GTFOBins, netcat, a Python PTY for shell stabilization, and plain enumeration.
🎓 ABOUT CTF-IED
Hands-on cybersecurity training, live workshops and self-paced labs across Penetration Testing, SOC / Blue Team, and AI Security.
Join the next live class: https://ctf-ied.com
Community Discord: [your invite link]
⚠️ ETHICS
Everything shown was performed on a lab environment we own and control, for education and authorized testing only. Never attack systems you do not own or have explicit written permission to test. Learn the attacks to defend against them.
#LinuxPrivilegeEscalation #privesc #Linux #GTFOBins #SUID #sudo #linpeas #PenetrationTesting #EthicalHacking #cybersecurity #infosec #OSCP #CTF