Advanced Linux Priviledge Escalation For OSCP & Beyond!

Download VMware Workstation Pro, install via the setup wizard, and activate the license key to enable pro features. Verify the licensed status and no expiration after activation.

Download the pre-installed Kali Linux virtual machine, choose the appropriate 64-bit or 32-bit option, and import it into VMware or your preferred virtualization software after unzipping.

Set up Kali Linux on VMware by configuring a virtual machine, allocating 4 GB RAM, configuring NAT networking, and setting DHCP-based IP addresses in the 10.10.10 range.

Log into a pre-installed Kali Linux VM, set a root password, and secure the system by enabling PostgreSQL, then update and upgrade packages before customizing the desktop.

Explore initial enumeration checks to identify privilege escalation vectors using Kali Linux, OpenVPN connections, and TryHackMe labs for Linux privilege escalation practice.

Perform user enumeration checks to identify who you are on a new system, using commands like id, whoami, sudo -l, and examining /etc/passwd and history files for credentials.

Master system enumeration on a Debian Linux host by collecting CPU, memory, user, and process data, inspecting cron jobs and writable paths to spot privilege escalation vectors.

Perform network enumeration to identify interfaces and ip ranges. Explore open ports and services and DHCP-based network details via netstat, ifconfig, ip route, and nginx on Debian.

Use a practical privilege-escalation cheat sheet for initial enumeration, shell upgrades, and system information, including whoami, hostname, uname -a, /etc/shadow permissions, and suid/sgid checks.

Discover the top Linux privilege escalation resources and tools, including a comprehensive enumeration checklist and scripts like linPEZ, linenum, linux-smart-enumeration, and linux-express-suggester for OSCP readiness.

Explore automated tools for Linux privilege escalation, focusing on linpys, linenum, Linux express suggestor, and Linux smart enumeration, with guided setup and documentation reading.

Discover how linpeas automates linux privilege escalation checks, highlighting red or yellow vectors and common misconfigurations to exploit in OSCP-like scenarios.

Linenum, the second go-to Linux privilege escalation tool after linps, enumerates system, kernel, passwords, sudo rights, cron and network details to reveal potential escalation vectors.

Learn to use the Linux Exploit Suggester to examine kernel versions, architectures, and Debian exploits, evaluate multiple privilege escalation ideas, and test candidate exploits such as DaddyCow with caution.

Engage in hands-on Linux privilege escalation using free labs, including Linux Privesk Arena and Linux Privilege Escalation Room. Connect via VPN and SSH to exploit vulnerabilities and kernel exploits.

Explore kernel exploits for privilege escalation on a Linux target, compiling and running the cow exploit to gain root, then restore the password binary.

Explore privilege escalation by locating and extracting stored passwords in configuration files, including OpenVPN auth files, using commands to reveal clear text credentials such as user and password 321.

Identify weak file permissions on the /etc/shadow file and the resulting privilege escalation risk. Extract and crack hashes with unshadow, hashcat, and john the ripper using roku.txt.

Explore the ssh keys privilege escalation vector by locating the idara-sa key, copying it to the attacker vm, setting permissions to 400, and attempting root ssh for a root shell.

Explore sudo privilege escalation via pseudo shell escaping, using sudo -l to identify exploitable binaries like find, arc, nmap, or vim, then escalate to root with Python 2.6.

Explains abusing sudo, via sudo -l detection, to read the shadow file through Apache 2, extract the root hash, and crack it with a word list.

Explore sudo ld preload privilege escalation using the LD_PRELOAD environment variable, with on-target compilation and execution to gain root access.

Explore SUID shared object injection as a privilege escalation vector, learn to detect SUID binaries, and follow a walkthrough that demonstrates escalating to root via a crafted shared object.

Demonstrates a suid symlink-based privilege escalation against an nginx setup, escalating from www-data to root via sudo-assisted steps, exploiting a cve and log rotate timing.

Explore the SUID environment variables as a privilege escalation vector by detecting SUID binaries and exploiting them to obtain a root shell via /tmp code and path manipulation.

Explore SUID environment variables and detection, use strings on binaries to reveal their functions, and compare two exploitation methods that escalate privileges to root on a Debian system.

Trigger a cron path privilege escalation by placing an override.sh in the home directory, relying on the system path to run as root via the cron tab, yielding root access.

Explore how cron wildcards enable privilege escalation, with detection via crontab output and exploitation steps, demonstrating root access and temporary directory monitoring.

Investigate the cron file override privilege escalation vector by examining the cron tab and override.sh for misconfigurations. Show how a world-writable script and a setuid bash can yield root access.

Explore nfs exploits by checking /tmp root squash on exports, mounting the target’s /tmp via nfs, and attempting root access with practical steps.

Explore linux privilege escalation from enumeration to exploitation in a hands-on TriHackMe lab, learning multiple techniques, and understanding how system configuration and kernel details affect gaining root access.

Enumerate a target system by gathering hostname, kernel version, distro, and Python version, identify CVEs, and explore automated enumeration tools for privilege escalation practice.

Explore kernel exploits as a privilege escalation vector on Linux, using GCC to compile an overlayfs local privilege escalation exploit for kernels 3.13–3.19 to access flag1.txt as root.

Demonstrate how suid binaries enable privilege escalation on linux by finding sgid/setuid binaries, reading /etc/shadow, cracking a hash, switching to user 2, and reading flag3.txt.

Learn to perform Linux privilege escalation via capabilities, scanning with getcap, and exploiting binaries like vim and view with python support to gain root access and reveal the flag.

Explore cron jobs as a privilege escalation vector by abusing a user cron entry to execute as root. Locate flag5.txt and extract Matt's password from /etc/shadow.

This lecture demonstrates path privilege escalation vector by exporting a crafted PATH, placing a malicious thm binary in a writable path to gain a root shell and read the flag6.txt.

Explore NFS privilege escalation using no_root_squash on identified mountable shares, mount them, compile a payload, and verify root access through a TryHackMe walkthrough toward a capstone challenge.

Unlock Linux privilege escalation through a capstone challenge that guides you from initial enumeration to root, using sudo exploits, suid/sgid binaries, shadow file access, hash cracking, and flag discovery.