Linux Privilege Escalation Examples From Zero to Hero - OSCP

Name: Linux Privilege Escalation Examples From Zero to Hero - OSCP
Rating: 4.2 (180 reviews)

Linux Privilege Escalation For The OSCP Training

Created bySecurity Gurus

Last updated 10/2020

English

English [Auto],

What you'll learn

How to Do Privilage Escalation in Linux
How to use the CLI
How to Prevent Privilege Escalation in Linux
How to Setup Linux Server in Virtual Box
How to create users
How to Linux Works

Course content

7 sections • 41 lectures • 4h 56m total length

What do you need?3:43
Download the Ubuntu server ISO and install VirtualBox to create a cross-platform VM for Ubuntu server setup and privilege escalation practice across Windows, Linux, or Mac.
Setting Up Ubuntu Server7:03
Setting Network and connecting via SSH6:21
install network tools:
sudo apt install net-tools

Setting Up Bad Permissions passwd10:28
Exploiting Bad Permission passwd7:04
Demonstrates privilege escalation by editing /etc/passwd to replace the root password with a hash and then logging in as root. Highlights how insecure permissions and password storage enable root access.
Another Way to Exploit passwd9:54
Shows how to escalate privileges by editing the password file to create a new user with Miguel's UID, GID, and password, enabling login as Miguel or root.
How to Stop It?4:07
Also, you want to delete all the encrypted passwords in / etc / passwd and the users created with root access
Challenge5:07
Engage in a hands-on challenge to perform Linux privilege escalation by adjusting file permissions with sudo chmod, exploring group and password file access to escalate privileges.
Group File Intro2:38
Explain how a group file defines Linux user groups and its format, and how adding a username to the group list enables privilege escalation, including the sudo group.
Exploiting Bad Permission 777 group6:33
How to Find 7777:10
find / -type f -perm 0777 2>/tmp/null
RWXRWXRWX /etc/shadow12:06
In cryptography, a salt is random data that is used as an additional input to a one-way function that hashes data, a password or passphrase. Salts are used to safeguard passwords in storage
Readable /etc/shadow12:50
sudo apt-get install -y hashcat
curl https://samsclass.info/123/proj10/500_passwords.txt > 500_passwords.txt

SUID7:47
SUID Example6:38
SUID nano and Vim8:13
Exploits suid nano and vim to escalate privileges by editing the /etc/passwd password hash with openssl and setting a root password, demonstrating misconfigured suid editors and root access.
How To Find SUID5:20
This lecture shows how to locate suid files with the find command, inspect permissions, and identify a root-owned nano binary as a potential privilege escalation path.
SUID cp command8:10
Explore privilege escalation with setuid cp to gain root access, including verifying permissions and attempting to replace the password file to create a new root user.

SUDO Intro6:55
More6:39
more command is used to view the text files in the command prompt, displaying one screen at a time in case the file is large (For example log files).
Vim4:56
Demonstrate privilege escalation using vim to edit sudoers and gain passwordless root access. Open shells from vim, and via ssh to obtain root privileges.
Less6:46
On Linux systems, less is a command that displays file contents or command output one page at a time in your terminal. less is most useful for viewing the content of large files or the results of commands that produce many lines of output.
Find5:01
awk5:00
Awk is a scripting language used for manipulating data and generating reports.The awk command programming language requires no compiling, and allows the user to use variables, numeric functions, string functions, and logical operators.
bin/bash6:40
Python and Perl8:26
bin/bash with File - echo9:26
SED5:22
Stream EDitor (Sed), one of the most prominent text-processing utilities on GNU/Linux. Similar to many other GNU/Linux utilities, it is stream-oriented and uses simple programming language. It is capable of solving complex text processing tasks with few lines of code. This easy, yet powerful utility makes GNU/Linux more interesting.
SED SUDO Privilege Escalation9:52
sudo sed -i 's/root:x:/root:$1$l2MrJFqr$8sMN9lsMvK6Vqt9qsDQoV1:/g' /etc/passwd
Crontab Privilege Escalation 110:52
Crontab Privilege Escalation 27:54
Demonstrates crontab privilege escalation through a misconfigured chrome tab, exposing writable root cron tasks and permissive file permissions to modify /etc/passwd and gain root access.

Lin Security Intro1:35
Download Lin Security Here:
https://in.security/lin-security-practise-your-linux-privilege-escalation-foo/
Lin Security - Sudo - l13:16
Lin Security - Hash in etc passwd7:19
Explore Linux privilege escalation by using sudo, inspecting /etc/shadow and /etc/passwd for hashes, cracking them with John the Ripper and rockyou.txt to become root.
Lin Security - SUID and Home4:28
Lin.security Root Squashing15:13
Demonstrates root squashing by mounting a shared NFS home, creating a Peter user with the same uid and gid, and SSH access via authorized keys for privilege escalation.
Docker Priv Escalation3:54

Requirements

Basic Linux

Description

In this course, I will teach how to do Privilege Escalate from a Linux OS. We will go over around 30 privilege escalation we can perform from a Linux OS. This training will help you achieve your OSCP, how to prevent Privilege Escalation, and how to perform them, too. Privilege escalation happens when a malicious user exploits a bug, design flaw, or configuration error in an application or operating system to gain elevated access to resources that should normally be unavailable to that user. The attacker can then use the newly gained privileges to steal confidential data, run administrative commands or deploy malware.

Who this course is for:

Students Pursuing OSCP
Users Pursuing Ethical Hacker Certification
Users willing to learn how to perform privilage escalation

Linux Privilege Escalation Examples From Zero to Hero - OSCP

What you'll learn

Explore related topics

Course content

Setting Up Virtual Machine3 lectures • 17min

exploiting bad permissions10 lectures • 1hr 18min

exploiting SUID5 lectures • 36min

SUDO13 lectures • 1hr 34min

Privilege Escalation Tools2 lectures • 26min

Lin.Security6 lectures • 46min

Practice Priviledge Escalation and More2 lectures0

Requirements

Description

Who this course is for: