🩸
Pentesting Notes
search
⌘Ctrlk
🩸
Pentesting Notes
  • ㊙️r3dcl1ff
    • 🔬Enumeration
    • 🧨Exploitation (deprecated node)
    • 🈲Privesc
      • sudo + GTFObins
        • sudo /bin/bash
        • /bin/rpm
        • /usr/bin/gdb
        • /usr/bin/php7.2
        • sudo -u#-1 /bin/bash
        • jjs
        • /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-0.el7_7.x86_64/jre/bin/java
        • /usr/bin/vim
        • /usr/bin/tee
        • /usr/bin/nice
        • /usr/bin/dd
        • nmap
        • /usr/bin/zip
        • /usr/bin/date
        • /usr/bin/base32
        • /usr/sbin/hping3
        • /usr/bin/cpulimit
        • /usr/bin/python
        • /etc/passwd
        • echo /bin/bash to executable file
        • /usr/bin/find
        • sudo_inject
        • /bin/systemctl
        • less
        • /bin/ash
        • awk
        • scp
        • man
        • ftp
        • knife
        • /usr/sbin/iftop
        • /usr/bin/nano
        • ed
        • openssl (read file)
        • tar
        • flock
        • expect
        • socat
        • Perl
        • /usr/bin/env
        • strace
      • Docker privilege escalation
      • Kernel Exploits
      • 'Nix manual enumeration
      • File transfers
      • Windows enumeration
      • Wordpress privesc
      • OpenSSL privesc
      • Privesc scripts | resources
      • vi
    • 🖥️CLI-Fu
    • 🎯OSINT
    • 🛠️Tools
    • 🟦Active Directory
    • 🪓Sysadmin
    • 🗒️Pentesting Checklist(s)
    • 🕷️WebApp Pentest
    • 🌩️Cloud
    • 🧠Threat Intel
    • 📟IoT / IIoT
    • 🏭ICS/OT - SCADA
    • 🩻Private Templates
    • 🐞BBP
    • 📱Mobile
  • Daily Syncs
    • Design Standups
  • Weekly Syncs
    • Company Weeklies
  • Other Regulars
    • Company Weeklies
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. ㊙️r3dcl1ffchevron-right
  2. 🈲Privesc

sudo + GTFObins

Different privesc vectors abusing sudo

sudo /bin/bashchevron-right/bin/rpmchevron-right/usr/bin/gdbchevron-right/usr/bin/php7.2chevron-rightsudo -u#-1 /bin/bashchevron-rightjjschevron-right/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-0.el7_7.x86_64/jre/bin/javachevron-right/usr/bin/vimchevron-right/usr/bin/teechevron-right/usr/bin/nicechevron-right/usr/bin/ddchevron-rightnmapchevron-right/usr/bin/zipchevron-right/usr/bin/datechevron-right/usr/bin/base32chevron-right/usr/sbin/hping3chevron-right/usr/bin/cpulimitchevron-right/usr/bin/pythonchevron-right/etc/passwdchevron-rightecho /bin/bash to executable filechevron-right/usr/bin/findchevron-rightsudo_injectchevron-right/bin/systemctlchevron-rightlesschevron-right/bin/ashchevron-rightawkchevron-rightscpchevron-rightmanchevron-rightftpchevron-rightknifechevron-right/usr/sbin/iftopchevron-right/usr/bin/nanochevron-rightedchevron-rightopenssl (read file)chevron-righttarchevron-rightflockchevron-rightexpectchevron-rightsocatchevron-rightPerlchevron-right/usr/bin/envchevron-rightstracechevron-right
PreviousPrivescchevron-leftNextsudo /bin/bashchevron-right

Last updated 3 years ago