.

Basic Priv Esculation for newbi

<<

sternone

Full Member
Full Member

Posts: 129

Joined: Tue Aug 07, 2012 1:31 am

Post Sun Sep 02, 2012 6:48 am

Re: Basic Priv Esculation for newbi

Linux is not a service. It's an OS.
Try harder....hmpf!!
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Sun Sep 02, 2012 10:07 am

Re: Basic Priv Esculation for newbi

Cyber.spirit wrote:Shadowzero, i ran a brute force attack against admin account and i hacked it. So i can read, write, del files but i cant logon using that account to other services as i mentioned the server is Linux


And that may be the best you'll be able to do in this situation. It's not always possible to compromise a system or escalate privileges.

A couple points to keep in mind:
  • If a service has a vulnerability that can only be exploited from an authenticated session, obtaining credentials may help you exploit the service. Otherwise, you'll just have standard access to the service.
  • Obtaining access to information is often sufficient. If a service you compromise contains sensitive information, that in itself is enough to sound the alarms. You don't need to root the box on top of that.
  • You may be able to leverage that access in other attacks. For example, you may be able to upload a file that could be accessed by a web server. Don't assume each service on a system exists in isolation.
The day you stop learning is the day you start becoming obsolete.
<<

Jamie.R

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Mon Aug 06, 2012 9:57 am

Location: UK

Post Sun Sep 02, 2012 2:26 pm

Re: Basic Priv Esculation for newbi

It may not always be possible but I say there really high chance as if there no script or anything else running on the machine that you can use to gain high privs. There good chance there might be exploit for the version of OS. It does really depend on a lot of factors.
| OSWP | eCPPT Silver and Gold | eWPT |

I'm an InterN0T'er
<<

cyber.spirit

User avatar

Sr. Member
Sr. Member

Posts: 356

Joined: Sun Feb 26, 2012 8:07 am

Location: in your heart!

Post Sun Sep 02, 2012 2:45 pm

Re: Basic Priv Esculation for newbi

the server is ubuntu i think ok im going to find some vuln but i dont think so its not possible
ICS Academy Network Security Certified
<<

sternone

Full Member
Full Member

Posts: 129

Joined: Tue Aug 07, 2012 1:31 am

Post Mon Sep 03, 2012 5:27 am

Re: Basic Priv Esculation for newbi

Cyber.spirit wrote:the server is ubuntu i think ok im going to find some vuln but i dont think so its not possible


The differences between something which you see and the truth is so much
Try harder....hmpf!!
<<

cyber.spirit

User avatar

Sr. Member
Sr. Member

Posts: 356

Joined: Sun Feb 26, 2012 8:07 am

Location: in your heart!

Post Mon Sep 03, 2012 12:53 pm

Re: Basic Priv Esculation for newbi

sternone wrote:Linux is not a service. It's an OS.

I have ubuntu, backtrack, fedora, and kubuntu and i can work with all of the so i think i know what is linux! ;D and the difference is so much but not in this case coz i know 100% that the server is ubuntu coz as i mentioned im helping 1 of my friends and he told me before the pentest but im sure i cant find any useable exploit
ICS Academy Network Security Certified
<<

sternone

Full Member
Full Member

Posts: 129

Joined: Tue Aug 07, 2012 1:31 am

Post Mon Sep 03, 2012 2:20 pm

Re: Basic Priv Esculation for newbi

Cyber.spirit wrote:
sternone wrote:Linux is not a service. It's an OS.

I have ubuntu, backtrack, fedora, and kubuntu and i can work with all of the so i think i know what is linux! ;D and the difference is so much but not in this case coz i know 100% that the server is ubuntu coz as i mentioned im helping 1 of my friends and he told me before the pentest but im sure i cant find any useable exploit


Sounds like your living in a prison !! A prison which you can see Ubuntu, touch Ubuntu, taste Ubuntu, or smell Ubuntu. A prison for your Ubuntu mind. The differences between something which you see and the truth is so much in this Ubuntu prison.
Try harder....hmpf!!
<<

cyber.spirit

User avatar

Sr. Member
Sr. Member

Posts: 356

Joined: Sun Feb 26, 2012 8:07 am

Location: in your heart!

Post Mon Sep 03, 2012 3:01 pm

Re: Basic Priv Esculation for newbi

sternone wrote:
Cyber.spirit wrote:
sternone wrote:Linux is not a service. It's an OS.

I have ubuntu, backtrack, fedora, and kubuntu and i can work with all of the so i think i know what is linux! ;D and the difference is so much but not in this case coz i know 100% that the server is ubuntu coz as i mentioned im helping 1 of my friends and he told me before the pentest but im sure i cant find any useable exploit


Sounds like your living in a prison !! A prison which you can see Ubuntu, touch Ubuntu, taste Ubuntu, or smell Ubuntu. A prison for your Ubuntu mind. The differences between something which you see and the truth is so much in this Ubuntu prison.


Man ubuntu isn't a prison is an os like what u've said. But windows is a world and world is prison so windows is going to be a prison for us coz we can't move on from it to ubuntu!!! LoL COZ our habits! And seriously this world (not windows! Real world!) is sick and is a prison too. So save ur mind and make it free good luck
ICS Academy Network Security Certified
<<

shadowzero

User avatar

Full Member
Full Member

Posts: 120

Joined: Sat Jun 02, 2012 10:03 pm

Post Mon Sep 03, 2012 6:58 pm

Re: Basic Priv Esculation for newbi

Right. I take it you missed the Matrix reference.
<<

cyber.spirit

User avatar

Sr. Member
Sr. Member

Posts: 356

Joined: Sun Feb 26, 2012 8:07 am

Location: in your heart!

Post Tue Sep 04, 2012 12:24 am

Re: Basic Priv Esculation for newbi

shadowzero wrote:Right. I take it you missed the Matrix reference.


The matrix just said the truth
ICS Academy Network Security Certified
<<

S3curityM0nkey

User avatar

Jr. Member
Jr. Member

Posts: 89

Joined: Mon May 16, 2011 6:47 pm

Post Tue Sep 04, 2012 12:44 am

Re: Basic Priv Esculation for newbi

sternone wrote:Sounds like your living in a prison !! A prison which you can see Ubuntu, touch Ubuntu, taste Ubuntu, or smell Ubuntu. A prison for your Ubuntu mind. The differences between something which you see and the truth is so much in this Ubuntu prison.


I'll pay that one....
<<

cyber.spirit

User avatar

Sr. Member
Sr. Member

Posts: 356

Joined: Sun Feb 26, 2012 8:07 am

Location: in your heart!

Post Tue Sep 04, 2012 3:08 am

Re: Basic Priv Esculation for newbi

who thinks the matrix movie was not real?
ICS Academy Network Security Certified
<<

rockman

Full Member
Full Member

Posts: 104

Joined: Sun Apr 06, 2008 12:38 pm

Post Fri Nov 09, 2012 10:50 am

Re: Basic Priv Esculation for newbi

Thanks for posting this, Jamie.R! This was just what I needed.
CISSP, IAM, working on OSCP
<<

petCT

Newbie
Newbie

Posts: 3

Joined: Mon Apr 22, 2013 9:01 am

Post Mon Apr 22, 2013 9:21 am

Re: Basic Priv Esculation for newbi

Thanks u very much , this article can help me .
<<

Jamie.R

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Mon Aug 06, 2012 9:57 am

Location: UK

Post Tue Apr 23, 2013 2:36 am

Re: Basic Priv Esculation for newbi

Glad you find it useful since this been so popular I plan on doing another tutorial soon not sure what on tho.
| OSWP | eCPPT Silver and Gold | eWPT |

I'm an InterN0T'er
Previous

Return to Tutorials

Who is online

Users browsing this forum: No registered users and 2 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software