.

Linux local privilege escalation - exploit-exercises.com

<<

m0wgli

User avatar

Sr. Member
Sr. Member

Posts: 308

Joined: Fri Jul 20, 2012 3:34 pm

Post Mon Oct 29, 2012 5:36 pm

Linux local privilege escalation - exploit-exercises.com

A quick search didn't show this mentioned before.

Whilst reading up on local privilege escalation in Linux, I came across the following resource:

http://exploit-exercises.com/nebula

Nebula takes the participant through a variety of common (and less than common) weaknesses and vulnerabilities in Linux. It takes a look at

   SUID files
   Permissions
   Race conditions
   Shell meta-variables
   $PATH weaknesses
   Scripting language weaknesses
   Binary compilation failures

At the end of Nebula, the user will have a reasonably thorough understanding of local attacks against Linux systems, and a cursory look at some of the remote attacks that are possible.


I'm currenlty working my way through them, and have found them really useful so far.
Security + | OSWP | eCPPT (Silver & Gold) | CSTA
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1662

Joined: Mon Jan 29, 2007 2:59 pm

Post Mon Oct 29, 2012 7:02 pm

Re: Linux local privilege escalation - exploit-exercises.com

Will have to see what it's got.  Thanks for the share.
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

Jamie.R

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Mon Aug 06, 2012 9:57 am

Location: UK

Post Wed Oct 31, 2012 3:27 am

Re: Linux local privilege escalation - exploit-exercises.com

Thanks looks like a good resource.
| OSWP | eCPPT Silver and Gold | eWPT |

I'm an InterN0T'er

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 2 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software