Linux local privilege escalation -



User avatar

Sr. Member
Sr. Member

Posts: 345

Joined: Fri Jul 20, 2012 3:34 pm

Post Mon Oct 29, 2012 5:36 pm

Linux local privilege escalation -

A quick search didn't show this mentioned before.

Whilst reading up on local privilege escalation in Linux, I came across the following resource:

Nebula takes the participant through a variety of common (and less than common) weaknesses and vulnerabilities in Linux. It takes a look at

   SUID files
   Race conditions
   Shell meta-variables
   $PATH weaknesses
   Scripting language weaknesses
   Binary compilation failures

At the end of Nebula, the user will have a reasonably thorough understanding of local attacks against Linux systems, and a cursory look at some of the remote attacks that are possible.

I'm currenlty working my way through them, and have found them really useful so far.
Security + | OSWP | eCPPT (Silver & Gold) | CSTA


User avatar

Hero Member
Hero Member

Posts: 1718

Joined: Mon Jan 29, 2007 2:59 pm

Post Mon Oct 29, 2012 7:02 pm

Re: Linux local privilege escalation -

Will have to see what it's got.  Thanks for the share.
~ hayabusa ~ 

"All men can see these tactics whereby I conquer,
but what none can see is the strategy out of which victory is evolved."
- Sun Tzu, 'The Art of War'

OSCE, OSCP (Former - GPEN, C|EH - both expiring / expired)


User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Mon Aug 06, 2012 9:57 am

Location: UK

Post Wed Oct 31, 2012 3:27 am

Re: Linux local privilege escalation -

Thanks looks like a good resource.
| OSWP | eCPPT Silver and Gold | eWPT |

I'm an InterN0T'er

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 2 guests

Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software