Перейти к содержимому

Linux Privesc Full Course: Credentials, SUID, Docker, Dirty Pipe

Praveenkumar Ponnam

0:00 / 0:00

Linux Privesc Full Course: Credentials, SUID, Docker, Dirty Pipe

28 просмотров · 2 недели назад
Praveenkumar Ponnam
112 подписчиков
28 просмотров · 2 недели назад
Got a low-priv shell? Privilege escalation turns that into another user’s secrets — or full root. Full narration: enumerate first, then match findings to techniques that win. Linux Privilege Escalation · 1:16:20 Northstar angle: root unlocks cross-host credentials. Timestamps 0:00 Overview 3:00 Enumeration toolkit 6:00 Foothold to pivot 9:00 Horizontal vs vertical 12:00 Credential hunting 15:00 Restricted shell escapes 18:00 Linux capabilities 21:00 Docker group 24:00 LinPEAS quick wins 27:00 Python library hijacking 30:00 Dirty Pipe (CVE-2022-0847) 33:00 Enumeration summary 36:00 Cleanup checklist 39:00 Authorization and scope 45:00 $PATH hijacking 51:00 High-risk group memberships Video:    • Linux Privesc Full Course: Credentials, SU...   #Linux #PrivilegeEscalation #Privesc #LinPEAS #DirtyPipe #Docker #Pentest #CyberSecurity