Collaborate Disseminate
I have a lab which requires me to use sudo to access a protected file and obtain its content.
linux@sudo:~$ sudo -l
Matching Defaults entries for linux on sudo:
env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr… Continue reading sudo access a file without sudo password [migrated]
As explained here (https://www.helpnetsecurity.com/2014/06/27/exploiting-wildcards-on-linux/), the tar command can be used to execute arbitrary code.
Is there a list of Linux commands, preferably including commands in pack… Continue reading Which Linux commands can execute user-supplied code? [on hold]
First of all, let me mention that I’m assuming a configuration as set up by current Linux desktop distributions (e. g. Debian, Fedora). I’m sure that there are methods which, if implemented, would mitigate the issues described here. What I… Continue reading Do sudo and .profile/.bashrc enable trivial privilege escalation?
If you’ve done anything with a modern Linux system — including most variants for the Raspberry Pi — you probably know about sudo. This typically allows an authorized user to elevate themselves to superuser status to do things.
However, there is a problem. If you have sudo access, you can do anything — at least, anything the sudoers file allows you to do. But what about extremely critical operations? We’ve all seen the movies where launching the nuclear missile requires two keys counter-rotated at the same time and third firing key. Is there an equivalent for Linux systems?
It isn’t …read more
A great quote from this InfoSec stackExchange thread.
The way to prevent malicious code from damaging files in your home
directory is to not run it using your account. Create a separate_user
that doesn’t have any spec… Continue reading How to properly protect /home with separate user accounts on Linux
I created a user with useradd without specifying a password. When I try to
sudo -u theuser echo hi
I am being prompted for my admin password (unless specified otherwise in the sudoers file, of course).
su -c “echo hi” -s … Continue reading Prevent program from switching to user without password
Coming from the comments in this question Why is it bad to log in as root?:
The sudo mechanics is in use so non-administrative tools “cannot harm your system.” I agree that it would be pretty bad if some github project I cloned was able t… Continue reading Why is root security enforced but $HOME typically unprotected?
I am trying to do priviledge escalation of a linux box.
My sudo -l output shows the following :
www-data@box:/scripts$ sudo -l
sudo -l
Matching Defaults entries for www-data on box:
env_reset, mail_badpass,
secure_path=/usr/local… Continue reading What does this sudo -l output mean and can this be priv. escalated?
Does this way have any security issues other than what’s mentioned in that post?
For reference:
Create a new group called say veracryptusers and give it the necessary permissions to use VeraCrypt without root password. Any user that b… Continue reading Is it secure to mount Veracrypt without sudo password in this way
This suggests that to restrict a user to a specific command with sudo a line like
%web ALL=(ALL) /usr/bin/service apache2 *
can be used. This particular line would restrict the user to running the mentioned program /usr/b… Continue reading Is an asterisk in sudo command specifications safe?