Privilege Escalation Methods

原文涵盖的主题

• Privilege Escalation Methods
• Purpose
• Inputs/Prerequisites
• Outputs/Deliverables
• Core Techniques
• Linux Privilege Escalation
• 1. Abusing Sudo Binaries
• 2. Abusing Scheduled Tasks (Cron)

Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux and Windows systems. Essential for penetration testing post-exploitation phase and red team operations. Initial low-privilege shell access on target system Kali Linux or penetration testing distribution Tools: Mimikatz, PowerView, PowerUpSQL, Responder, Impacket, Rubeus Understanding of Windows/Linux privilege models For AD attacks: Domain user credentials and network access to DC Root or Administrator shell access Extracted credentials and hashes Persistent access mechanisms Domain compromise (for AD environments) -- Exploit misconfigured sudo permissions using GTFOBins techniques: -- -- -- -- | Technique | OS | Domain Required | Tool | |-----------|-----|-----------------|------| | Sudo Binary Abuse | Linux | No | GTFOBins | | Cron Job Exploit | Linux | No | Manual | | Capability Abuse | Linux | No | getcap | | NFS norootsquash | Linux | No | mount | | Token Impersonation | Windows | No | SweetPotato | | Service Abuse | Windows | No | PowerUp | | Kerberoasting | Windows | Yes | Rubeus/Impacket | | AS-REP Roasting | Windows | Yes | Rubeus | | Gold

这里只展示节选，请以完整原文和当前要求为准。