The File That Lists Every User on Linux (/passwd)
Once you're inside a Linux system, the next move isn't to run exploits blindly. It's to figure out who else is on this machine — because every single user account is either a target or a stepping stone to root.
In this video we go deep into /etc/passwd — a world-readable file that lists every user that has ever had access to the system. Most beginners scroll past it. But if you know how to read it properly, it tells you usernames, home directories, shell types, and service accounts that might have misconfigurations you can exploit.
We also cover something most tutorials skip — how to spot red flags inside /etc/passwd. Specifically, service accounts that are running with a real shell instead of nologin. That's a misconfiguration, and that's exactly the kind of thing we're hunting for during privilege escalation.
This is part 2 of the Linux Manual Enumeration series. If you haven't watched part 1 yet, go do that first — link is in the description.
TIMESTAMPS
0:00 – Intro & recap
0:20 – Why enumerate users after initial access
1:44 – What makes other users valuable
2:14 – /etc/passwd explained
3:55 – The shadow file
4:10 – Live demo: reading /etc/passwd
8:52 – Bash vs nologin shells
10:16 – RED FLAG: service accounts with real shells
11:05 – Lateral movement & what's next
TOPICS COVERED
linux privilege escalation | /etc/passwd enumeration | manual enumeration linux | linux hacking | reading /etc/passwd | linux user enumeration | linux privesc | ethical hacking linux | kali linux tutorial | linux post exploitation | shadow file linux | service account misconfiguration | linux nologin shell | linux bash history | CTF linux privilege escalation | red team linux | linux lateral movement | cybersecurity tutorial | linux hacking 2025 | penetration testing linux
TAGS
cybersecurity tutorial,linux security,linux terminal commands,linux privesc tutorial,linux hacking 2025,post exploitation linux,linux misconfiguration,linux root access,linux initial access,linux system enumeration,linux account enumeration,who is on this machine linux,find users linux,cat etc passwd,linux privilege escalation for beginners,ethical hacking tutorial,linux command line hacking