User Tools

Site Tools


procedures:privesc_gnu_linux

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
procedures:privesc_gnu_linux [2021/05/19 20:41] – created didzkovitchzprocedures:privesc_gnu_linux [2021/05/24 18:18] (current) – [SUID] didzkovitchz
Line 3: Line 3:
 ===== SUID ===== ===== SUID =====
  
-''%%find / -user root -perm -4000 -print 2>/dev/null%%'' +''%%find / -user root -perm -4000 -print 2>/dev/null%%''\\ 
 +ou\\ 
 +''%%find / -perm -u=s -type f 2>/dev/null%%''
 ===== Liste des SUID courants ===== ===== Liste des SUID courants =====
  
 <code> <code>
-/usr/bin/newuidmap+/bin/fusermount 
 +/bin/mount 
 +/bin/ntfs-3g 
 +/bin/ping 
 +/bin/ping6 
 +/bin/su 
 +/bin/umount 
 +/sbin/mount.cifs
 /usr/bin/chfn /usr/bin/chfn
 +/usr/bin/chsh
 +/usr/bin/gpasswd
 /usr/bin/newgidmap /usr/bin/newgidmap
-/usr/bin/sudo +/usr/bin/newgrp 
-/usr/bin/chsh+/usr/bin/newuidmap
 /usr/bin/passwd /usr/bin/passwd
 /usr/bin/pkexec /usr/bin/pkexec
-/usr/bin/newgrp +/usr/bin/sudo 
-/usr/bin/gpasswd+/usr/lib/dbus-1.0/dbus-daemon-launch-helper 
 +/usr/lib/eject/dmcrypt-get-device 
 +/usr/lib/openssh/ssh-keysign 
 +/usr/lib/policykit-1/polkit-agent-helper-1
 /usr/lib/snapd/snap-confine /usr/lib/snapd/snap-confine
-/usr/lib/policykit-1/polkit-agent-helper-1 
-/usr/lib/openssh/ssh-keysign 
-/usr/lib/eject/dmcrypt-get-device 
 /usr/lib/squid/pinger /usr/lib/squid/pinger
-/usr/lib/dbus-1.0/dbus-daemon-launch-helper 
 /usr/lib/x86_64-linux-gnu/lxc/lxc-user-nic /usr/lib/x86_64-linux-gnu/lxc/lxc-user-nic
-/bin/su 
-/bin/ntfs-3g 
-/bin/mount 
-/bin/ping6 
-/bin/umount 
-/bin/ping 
-/bin/fusermount 
-/sbin/mount.cifs 
 </code> </code>
  
procedures/privesc_gnu_linux.1621449686.txt.gz · Last modified: 2021/05/19 20:41 by didzkovitchz