
Master the command line interface across Linux, Windows, and Mac; learn how to list directories, view and edit files, and navigate with basic commands, and explore reverse shells.
Learn how Linux's multi-user system enables privilege escalation from a normal user to root or other users, including viewing the password file, changing passwords, and gaining full system control.
Explore how a writable /etc/passwd file enables privilege escalation by replacing the root password hash with a known value, then using it to gain root access.
Learn how to perform linux privilege escalation in jslinux by uploading a lesson file, making the system vulnerable, generating a root password hash with openssl, and logging in as root.
Identify setuid files and misconfigured permissions to run as the file owner, potentially gaining a root shell. Locate suid binaries with find and reference GTFOBins for abuse paths.
Identify and exploit setuid programs to escalate to root by running misconfigured files and shells, demonstrated with sudo bash and reading protected files.
Explain how the path variable dictates where Linux looks for commands, and how replacing a standard command with a malicious program in path can escalate privileges to root.
upload lesson three, make it executable, run it, then exploit the PATH variable by replacing a command with bash in /tmp to escalate from user one to root.
In this course you will learn Linux privilege escalation. So what is that?
On a Linux system there are two kinds of users: regular users and root (administrator users). If there are misconfigurations in the Linux system, you are able to change your user: become another user (horizontal escalation) or even become root (vertical escalation).
If you have initial access to a Linux system, but want to become administrator or get access to other Linux accounts, it's possible that you can get that access. If there are misconfigurations in the system, then you can abuse those in order to gain different user privileges on the Linux system. So this type of hacking is about getting more access into a system.
By the end of this course, you'll be able to get root access if the Linux system is misconfigured. The course contains practice labs that will let you practice what you have learned in the course. You'll be able to gain root and practice in several labs. You'll also be able to find if a system is vulnerable to this type of escalation.
This is a beginners course, but basic Linux knowledge would be beneficial. You don't need anything else, not even Kali Linux as the course includes practice labs itself.