novaden

privilege-escalation

25 items

Everything tagged "privilege-escalation".

Cron Jobs notes 9 min 18 Jul 2026 Scheduled jobs run on a timer, often as root. Kernel Exploits notes 5 min 19 Jul 2026 When the cheaper privilege-escalation vectors (`sudo -l`, SUID, cron, credentials at rest) are exhausted, an old kernel is the fallback. LinEnum notes 1 min 19 Jul 2026 LinEnum is a classic bash privilege-escalation enumeration script. LinPEAS notes 1 min 18 Jul 2026 LinPEAS enumerates a Linux host for privilege escalation vectors and highlights the most promising findings by likelihood. Linux Capabilities notes 3 min 22 Jul 2026 Capabilities split root's power into fine-grained units that can be granted to a single binary. linux-exploit-suggester notes 2 min 05 Aug 2026 `les.sh` maps a kernel version to public local privilege escalation exploits and ranks them. Linux Groups notes 3 min 25 Jul 2026 A supplementary group is an access-control grant that nothing in the user's own home reflects. linux-smart-enumeration notes 1 min 19 Jul 2026 `lse.sh` (linux-smart-enumeration) enumerates a Linux host for privilege-escalation vectors, like [LinPEAS](/collections/oscp/linpeas) but quieter and ranked by verbosity level. MySQL Privilege Escalation notes 5 min 18 Jul 2026 A MySQL account with high privileges is a path to the operating system. PrivescCheck PowerUp SharpUp notes 2 min 29 Aug 2026 Three Windows privilege escalation enumerators that sit between [winPEAS](/collections/oscp/winpeas) and manual triage. pspy notes 2 min 25 Jul 2026 pspy watches process creation and scheduled jobs on a Linux host without root. Sudo notes 14 min 19 Jul 2026 `sudo` runs a program with another user's privileges, root by default. Windows Token Privileges notes 11 min 22 Jul 2026 Windows assigns privileges to users and groups. winPEAS notes 1 min 22 Jul 2026 winPEAS enumerates a Windows host for privilege escalation vectors and highlights the most promising findings. Windows Service Exploits notes 5 min 22 Jul 2026 Windows services run in the background, often as SYSTEM. accesschk notes 1 min 22 Jul 2026 accesschk (Sysinternals) reports the effective access a user or group has to services, files, directories, and registry keys. Linux Permissions notes 4 min 19 Jul 2026 Every Linux privilege escalation is an access-control violation, and access control in Linux is built on permissions. Privilege Escalation (Windows) notes 4 min 22 Jul 2026 Goal: turn a low-privilege shell into one running as Administrator or SYSTEM. Privilege Escalation (Linux) notes 4 min 18 Jul 2026 Goal: turn a low-privilege shell into root. icacls notes 2 min 25 Aug 2026 Built-in Windows tool that prints and changes NTFS permissions on files and folders. SUID Binaries notes 12 min 18 Jul 2026 A SUID (SetUID) binary runs with the effective UID of its owner, not the user who launched it. Windows Autoruns and Scheduled Tasks notes 2 min 22 Jul 2026 A group of misconfigurations that all end the same way: place or modify something a privileged trigger later executes. Service Exploits notes 2 min 19 Jul 2026 A service is a program running in the background, accepting input or doing periodic work. Weak File Permissions notes 2 min 19 Jul 2026 Sensitive system files are protected by their permissions, not by secrecy. NFS no_root_squash notes 1 min 19 Jul 2026 NFS shares are exported from `/etc/exports`.