Collaborate Disseminate
Once an attacker has a shell as your sudoer user (or just compromised a local process enough), he/she can use one of the many privilege escalation tool to even automatically put themselves for example as apt or some other processed called … Continue reading Is `sudo` almost useless?
Setup info: I don’t believe this is the issue as I regularly update my system. I’ll add one piece of information as an example. If you would really like to the rest then I can add more in later
metasploit v5.0.89-dev
Payload: I used a cu… Continue reading Metasploit: Issue with upgrading a low privilege shell (sessions -u)
I remember playing Minecraft (Java-we’re only talking about Minecraft Java on the computer here) at like 13-14 years old, and having this server owner claim that the server has been hacked, and that attackers were able to gain extra privil… Continue reading How do I know/find out about Minecraft Server Vulnerabilities?
a malicious app installed on a device can hide behind legitimate apps. Continue reading StrandHogg 2.0 Critical Bug Allows Android App Hijacking
Docker has fixed a vulnerability that could have allowed an attacker to gain control of a Windows system using its service. Continue reading Docker Desktop danger discovered, patch now
So say I ran a python reverse shell script on a victim machine and caught the connection on my machine using netcat -nvlp 4444. What would be the best way to upgrade this shell? Is there a way to import this established connection into met… Continue reading What is the best way to upgrade a netcat low priv shell into a high priv shell [closed]
I’m still learning and this was a part of using systemctl for privilege escalation.
eop=$(mktemp).service
echo ‘[Service]
ExecStart=/bin/sh -c “cat /root/root.txt > /tmp/output”
[Install]
WantedBy=multi-user.target’ >$eop
Reading some privilege escalation script I found that one of the enumeration command is lsof -i. How the output could be exploited to privilege escalate?
Continue reading How lsof -i can be useful during the privilege escalation phase?
I am currently doing a ctf lab, and found out a login for a mysql server. I could login and mess around with the database for that user but not as the server as a whole. Is there a way I can escalate my privilege from a restricted user to … Continue reading How can you escalate privilge in mysql servers?
I have access to a server via RCE over http. I can send post requests to the server which results in command execution. I am attempting to escalate privileges via sudo (su is not installed).
The server is heavily firewalled with egress fi… Continue reading Exectuting sudo command in one line within a non-tty shell