suid – WindowsTechs.com

SUID Priv Escalation – LD_LIBRARY_PATH versus ldconfig and /etc/ld.so.conf

Posted on June 25, 2021 by Rennitbaby

Background
Currently doing some vulnservers on Offensive Security’s Proving Grounds Practice Labs. A vulnserver is a machine configured with vulnerabilities for testing/audit and research purposes.
I came across a machine that had a cronjo… Continue reading SUID Priv Escalation – LD_LIBRARY_PATH versus ldconfig and /etc/ld.so.conf→

Privilege Escalation – SHELLOPTS and PS4 exploitable conditions

Posted on January 21, 2021 by Rennitbaby

Background
Currently prepping for OSCP, and taking Tib3rius’s course on Linux Privilege Escalation.
When working with one of the exercises in privilege escalating by enumerating and exploiting vulnerable SUID/SGID programs. The instructor … Continue reading Privilege Escalation – SHELLOPTS and PS4 exploitable conditions→