I expect the video to be on YouTube sometime in March. Patreons will probably have an early access version mid-February.
Prikaži ovu nit
Starting to put together a Linux Privesc Video. Can anyone spot something non-network that I'm missing? - Recon (linPEAS/LinEnum) - Sudo - Permission Overview (file writes - sshKey/cron) - SetUID - Kernel - Cron - Network [mysql, postgres, erlang cookie (couchDb)]
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Is binary exploitation inside your list? Must not be kernel and still could provide higher privilege access.
-
Not going into Exploit Dev. Don't have plans on covering that anytime soon, but cover tons in HackTheBox videos.
- Još 3 druga odgovora
Novi razgovor -
-
-
Reverse engineering to get creds or binary exploitation
-
Unfortunately out of the scope of this video.
- Još 3 druga odgovora
Novi razgovor -
-
-
Unix capabilities cd / && getcap -r
-
Good call! I'll be sure to put a wireshark with network capabilities to show that.
Kraj razgovora
Novi razgovor -
-
-
Local binaries that could be used to bypass local security restrictions (gtfobins)?
-
Sudo/SetUID will have that.
Kraj razgovora
Novi razgovor -
-
-
will you be doing a Windows one as well?
-
Unfortunately, not in the near future. Have a few other videos I want to do first. Goal is for one a month, Windows Privesc isn't at the top of the list.
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.