Linux Privilege Escalation - Tradecraft Security Weekly #22

[@Queennyla16]

I am a 3rd yr pentester (9 years in IT) in the federal sector and i must say that was the most no bullshit explanation of privesc that i have ever seen. Please continue making videos the way you do (straight to the point)..also you have a new subscriber!

[@Xianion]

This is an extremely helpful video! You helped me escape a restricted shell in HTB!

[@fsacer]

note that also newer versions of nmap can be exploited (if set as SUID) by including your own script

[@TopCaliber0]

Good tip, thanks!

[@isaargentina4495]

Wonderfull! I learnt a lot, while Im trying to recover sudo proviledge in a Oracle instance

[@majidshahmiri7860]

Liked the video very much, nicely explained, best part is quality of video and audio and the vocal of speaker.. 5 out of 5

[@dombg6313]

Thanks for the video. Just a little heads up: The command to list other super users will always return "root" since all it does is checking for $3 to be 0 and then print out that line. $3 is the entry for the user id and uid = 0 is always root.

[@nullogs4468]

That was fun and good to learn. Im at the very beginning of my pentesting journey about to start Linux+ in class.

[@SamOween]

Where are you 10 months later? What advice would you give to yourself 10 months ago?

[@iadesanya]

Great episode Beau!

[@ahnospell44]

Thank you man, great Episode!

[@ByteMasterPro]

Thank you! This is excellent!

[@andreys1071]

Neat channel, thank you!

[@GianLello]

How can i install an older version of nmap correctly? I have huge roblems on doing it

[@emelbasayar5809]

This video is very usefull thanks . Privelege escalation is extremely hard. Do you have any suggestion more? Or do you upload a lot video about priv escalation :) Thanks

[@blcksmith]

u deserve a really cold beer man ;)

[@emre-yaman]

sudo -l only shows /usr/bin/php and couldnt find my way around :/ could you spare any tips about the situation

[@浮尘-o4u]

Very nice 👍

[@Ninja5433]

I'm so mad i had to come here for this.......... but thank you for the education lol

[@k3nundrum]

Still an awesome video man.... BTBAM FTW!

[@hdphoenix29]

i find it the most usefull tutorial on youtube Thanks a lot !!!

[@aabid3677]

Very informative ❤️

[@memedaddyz]

Thank you!

[@Nagle11234]

i chmod my nmap to get it suid, but when i use the !sh command it dosent give me root :( any idea what im doing wrong?

[@j.6230]

Is there any easy way to determine what SUID files can be exploited, I know a couple from off the top of my head like nmap. But how do you determine if other SUID binaries except nmap/vi/vim etc. can be exploited that way?

[@nylarnameless1759]

I use linuxprivchecker you can GitHub it. It's a simple python script that you can deliver a number of ways. Once it's on a target system running it gives you just about all the information you could ever dream of.

[@Robertlavigne1]

Thanks! This video got me my 2nd root on HackTheBox! I'm sure I'll come back to this video a few times moving forward as there are lots of great tips in there!

[@glowiever]

I can't seem to hack a cloud vps, they removed almost all non essential binaries. even the sudo lol.

[@calmeidazim]

You rock :) thank you, learn a lot

[@macobadmintoncambodia8118]

Good job

[@shikharjoshi267]

awesome

[@Rafael-kr8xb]

noice video !

[@Rafael-kr8xb]

more videos like this !

[@mdfrslivinglife3959]

Very basic knowledge about privilege escalation

[@ghareebelsony5634]

wtf are u a hacking god or something?? it will take me about a hundred year just to think this way -_-! i will just go for sales or marketing, security doesn't suit me anyway :D

[@nicolasdiaz3544]

not work nmap --interactive

[@hamzagondal8217]

The version of NMap you are targeting might not have the interactive feature available.

[@nicolasdiaz3544]

@@hamzagondal8217 in the last version?

[@hamzagondal8217]

@@nicolasdiaz3544 You can check which version of NMap you are targeting. Once you do, you can google if that version has the interactive feature enabled. I'm gonna say it may not as it was disabled a while ago from NMap however, it may exist on a system running older linux version.