Testlab

Notes on techniques

Linux

Introduction
- What?
- Why?
- How?
Reuseful escalation patterns
Kernel vulnerability exploits
- Example: CVE-2015-1328
  - Using 37292
  - Using 40688
- Notes
Exploit sudo misconfigurations
- Example: find
  - LD_PRELOAD
  - Another find
- Notes
SUID and SGID exploits
- Example: nano
  - Crack passwords file
  - Add a user
- Notes
Exploit capable programs
- Example: vim
- Notes
Cron jobs exploits
- Example: Backup script
- Notes
Path exploits
- Example
- Notes
NFS exploits
- Example: /tmp share
- Notes
Shellcode techniques
- Resources

Windows

Introduction
- What?
- Why?
- How?
Reuseful escalation patterns
Harvesting passwords
- Examples
- Notes
Quick misconfiguration wins
- Examples
  - Scheduled tasks
  - AlwaysInstallElevated
- Notes
Abusing service misconfigurations
- Examples
- Notes
Abusing dangerous privileges
Abusing vulnerable software
- Example
- Notes
Shellcode techniques
- Resources

Coding shells and exploits

TryHackMe rooms

Root-me app-script challenges

Smithing

Index

Unseen University, 2024, with a forest garden fostered by /ut7.