<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Linux on LEIKAH</title><link>https://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/</link><description>Recent content in Linux on LEIKAH</description><generator>Hugo</generator><language>en</language><atom:link href="https://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/index.xml" rel="self" type="application/rss+xml"/><item><title>Linux Post-Exploit Enum</title><link>https://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/info_gather/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/info_gather/</guid><description>&lt;p&gt;Enumeration is key to privilege escalation. After gaining initial shell access, it&amp;rsquo;s important to check for the following details:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;OS Version&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Kernel Version&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Running Services&lt;/strong&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2 id="situational-awareness"&gt;Situational Awareness&lt;a class="td-heading-self-link" href="#situational-awareness" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;p&gt;After getting a shell onto a Linux target, we should try to run a few commands to orient ourselves:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;code&gt;whoami&lt;/code&gt;: username&lt;/li&gt;
&lt;li&gt;&lt;code&gt;id&lt;/code&gt;: group membership&lt;/li&gt;
&lt;li&gt;&lt;code&gt;hostname&lt;/code&gt;: server hostname (naming convention?)&lt;/li&gt;
&lt;li&gt;&lt;code&gt;ifconfig&lt;/code&gt; / &lt;code&gt;ip a&lt;/code&gt;: Network address(es)?&lt;/li&gt;
&lt;li&gt;&lt;code&gt;sudo -l&lt;/code&gt;: Sudo permissions? With or without password?&lt;/li&gt;
&lt;/ul&gt;
&lt;h2 id="operating-system-information"&gt;Operating System Information&lt;a class="td-heading-self-link" href="#operating-system-information" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h2&gt;
&lt;h3 id="linux-distribution"&gt;Linux Distribution&lt;a class="td-heading-self-link" href="#linux-distribution" aria-label="Heading self-link"&gt;&lt;/a&gt;&lt;/h3&gt;
&lt;p&gt;We also want to know what Linux Distribution is running on the target. Different distros have different tools and utilities available on the system that may aid our privilege escalation.&lt;/p&gt;</description></item></channel></rss>