EH-Net

Ethical Hacking Discussions and Related Certifications => Network Pen Testing => Topic started by: m0wgli on October 29, 2012, 05:36:19 PM



Title: Linux local privilege escalation - exploit-exercises.com
Post by: m0wgli on October 29, 2012, 05:36:19 PM
A quick search didn't show this mentioned before.

Whilst reading up on local privilege escalation in Linux, I came across the following resource:

http://exploit-exercises.com/nebula

Quote
Nebula takes the participant through a variety of common (and less than common) weaknesses and vulnerabilities in Linux. It takes a look at

    SUID files
    Permissions
    Race conditions
    Shell meta-variables
    $PATH weaknesses
    Scripting language weaknesses
    Binary compilation failures

At the end of Nebula, the user will have a reasonably thorough understanding of local attacks against Linux systems, and a cursory look at some of the remote attacks that are possible.

I'm currenlty working my way through them, and have found them really useful so far.


Title: Re: Linux local privilege escalation - exploit-exercises.com
Post by: hayabusa on October 29, 2012, 07:02:36 PM
Will have to see what it's got.  Thanks for the share.


Title: Re: Linux local privilege escalation - exploit-exercises.com
Post by: Jamie.R on October 31, 2012, 03:27:18 AM
Thanks looks like a good resource.