
This is an introduction and course overview lecture to set our goal.
Create a TryHackMe account by clicking join now, entering a username, email, and password, and completing the verification steps, then verify your email and explore your dashboard.
Join the Lynch Privilege Escalation Trial Hackney Room from lecture resources, then download the OpenVPN configuration and connect to the cloud lab network.
Insecure permissions on the ETSI password file enable root access and credential manipulation to reveal the flag in a lab setting.
Practice Linux privilege escalation by exploiting misconfigured sudo permissions to spawn a root shell via vim, nano, or find, referencing GTFOBins to elevate privileges and explore ld preload.
explore wildcard injection in cron jobs and show how a non-privileged user could manipulate scripts to add themselves to the sudoers file and gain root access.
Navigate to the home directory, inspect the VPN files directory, and read the OpenVPN file to retrieve credentials via cat and cut. Understand how improper permissions expose usernames and passwords.
Examine how LXD combines container and virtual machine capabilities with image-based Linux distributions, built on LXC, and how the LXD socket can expose root access.
Explain how the network file system enables remote file access, how misconfigurations can allow privilege escalation to root, and the attacker steps to exploit an NFS service.
Hello and welcome to this course!
This course requires no background on Linux Privilege Escalation. You will go from beginner to advanced in just a couple of hours. We will first focus on the theory and make sure we fully understand it before moving to practical examples.
This course comes with a FREE online privilege escalation hacking lab to practice what you learn throughout the course. We have structured the course in a way that the student will learn Linux Privilege Escalation effectively through practice. That is why we designed and created our own lab to share with our students free of charge.
You will learn Linux Privilege Escalation with:
File Permissions
Sudo Bypass
Cron Jobs
Passwords on Files
LXD Linux Container
Network File System (NFS)
Kernel Exploits
SUID/SGID Executables
Automatic tools
All of these topics will be covered in detail.
By the end of this course, you will have completely mastered the fundamentals of Linux Privilege Escalation and you will also be able to confidently take on any Linux privilege escalation challenge either on a CTF competition, an exam or in a real-life scenario.
If you ever have any questions related to the course content please create a thread from the QnA section and describe your issue, and we will try to answer as soon as possible!