SEC335 ‐ Linux Privilege Escalation ‐ 10 11 26 - tnugent371/tech-journal GitHub Wiki

Trevor Nugent SEC - 335 Initial Access and Execution

Phase Zero

Vector Thing
V1 /opt/lab/bin writable
V2 find as sudo
V3 /opt/lab/scripts/rotate.sh writable
V4 /opt/lab/bin/agent missing
V5 /opt/lab/bin writable
V6 /etc/update-motd.d/ writable
V7 /opt/lab/bin/python3 runs with owner perms

Phase One

Phase Two

Phase Three

Phase Four

Phase Five

Phase Six

Phase Seven