Linux Privilege Escalation | TryHackMe common priv esc
📄 Cyber Security Certification Notes & Cheat Sheets
https://buymeacoffee.com/notescatalog...
🚀(2nd link) Cyber Security Certification Notes & Cheat Sheets
https://shop.motasem-notes.net/collec...
💡Cyber Security Notes | Membership Access
https://buymeacoffee.com/notescatalog...
🧩Cybersecurity Direct Coaching & Mentoring
https://shop.motasem-notes.net/collec...
🔥Download FREE Cyber Security 101 Study Notes
https://buymeacoffee.com/notescatalog...
🧠 Get Strategic cyber security and tech insights weekly to your email by joining my newsletter below
https://buymeacoffee.com/notescatalog...
📊Blog Writeups
https://www.motasem-notes.net
***
In this video walkthrough, we covered common Linux Privilege Escalation vulnerabilities and techniques such as enumeration, crontabs, SUID/GUID files, PATH variables,etc. We used TryHackMe common priv esc room for practical demonstrations.
*******
Writeup
https://motasem-notes.net/linux-privi...
TryHackMe Common Linux Privesc
https://tryhackme.com/r/room/commonli...
*******
Store
https://buymeacoffee.com/notescatalog...
Patreon
/ motasemhamdan
Instagram
/ motasem.hamdan.tech
Google Profile
https://maps.app.goo.gl/eLotQQb7Dm6ai...
LinkedIn
[1]: / motasem-hamdan-7673289b
[2]: / motasem-eldad-ha-bb42481b2
Instagram
/ mastermindstudynotes
Twitter
/ manmotasem
Facebook
/ motasemhamdantty
****
0:00 - Introduction to Linux Privilege Escalation Techniques
0:12 - Overview of Privilege Escalation Methods Covered
0:24 - Connecting to the Target Machine via SSH
1:01 - Downloading and Using LinEnum for Enumeration
2:00 - Reviewing LinEnum Results for Key Information
3:10 - Identifying Writable /etc/passwd File for Exploitation
4:30 - Checking SUID Binaries for Privilege Escalation
5:12 - Reviewing Misconfigured File Permissions
6:05 - Finding User-Specific Files with SUID Permissions
7:10 - Demonstrating SUID Exploitation with “Shell” Binary
8:15 - Answering Enumeration Questions on Users and Shells
9:03 - Reviewing Cron Jobs and Identifying Writable Scripts
10:30 - Locating Script Running Every 5 Minutes
11:20 - Modifying /etc/passwd to Add New Root User
12:15 - Generating a Password Hash for New User
13:10 - Creating a New Root-Level User in /etc/passwd
14:45 - Logging in as Root via New User
16:30 - Summary of Exploitation Techniques Covered
23:05 - Adding Root User Entry to /etc/passwd for Escalation
23:57 - Conclusion and Preview of Next Escalation Methods