While conducting a pentest on a Linux machine, I have a limited shell and trying to escalate privileges.
One interesting thing that i have found is a binary called connect installed under /usr/local/bin/ that has SUID permissions. Here is the complete output for ls -al:
mark@serv1:/usr/local/bin$ ls -al connect -rwsr-xr-x 1 root root 6723 2013-10-10 13:02 connect
When trying to run this binary, it seems that it is trying to connect to an ssh server. here is the output.
mark@serv1:/usr/local/bin$ ./connect Connecting to x.x.x.x ssh: connect to host x.x.x.x port 22: Network is unreachable lost connection
I am really wondering is there is a way to leverage this to get a root access to the system ? I though that I could utilize this to get a shell of this SUID binary or even trying to ssh firstname.lastname@example.org utilizing these permissions. However, I can not figure out how to accomplish this since I am not that much Linux expert.