Basics of Privilege escalation
Understanding about the user and privileges associated are key to PrivEsc.
- About the users
- who is the user
- which groups does the user belong to.
- Does the user have any elevated privileges.
- User Environment
- What is the OS Architecture
- Which Version and distribution
- Any Environment Variable
- What is the OS Architecture
- Folders and files access
- Are there any hidden folder in the home directory.
- User history file
- Are there any version control product accessible.
- List Other users directories
- Process or Services
- Which services are run by root or super user
- Are there any miss configurations of these services
- Are there any cron or scheduled jobs
- Which services are run by root or super user
- Application
- Which applications are installed
- Miss configurations
- Are these configs writable
- Are there any hardcoded passwords
- Which applications are installed
- Network Configuration
Get started There is no other day to start a new beginning.