Privilege Escalation

This guide details various Linux privilege escalation techniques and methods for gaining unauthorized access to higher privileges within a Linux environment. Key strategies include: 1. **Kernel Exploits** - Identifying vulnerable kernel versions using commands like `uname -a` and utilizing tools such as `searchsploit`. 2. **Sudo Vulnerabilities** - Exploiting misconfigurations in `sudo` that permit running commands without a password, or checking for known vulnerable versions. 3. **Environment Variables** - Examining environment variables for sensitive information and potential exploits. 4. **Compromised Binaries** - Monitoring SUID binaries and writable directories for potential privilege escalation opportunities, such as modifying scripts executed by root. 5. **Scheduled Tasks** - Analyzing cron jobs and scripts for potential vulnerabilities that can be exploited to run arbitrary code as root. 6. **File Permissions & ACLs** - Listing and examining file permissions, especially in sensitive directories, for misconfigurations that allow unauthorized write access. 7. **Network Services** - Discovering hidden services or sockets that can be abused for local exploits. 8. **Monitoring and Tools** - Utilizing tools like `linPEAS`, `GTFOBins`, and `FallOfSudo` for automated privilege escalation checks. The document emphasizes the importance of understanding system configurations and regularly testing for vulnerabilities to mitigate risks.

Source synthétisée — 6/4/2026