19
votes
Accepted
Escalating user privileges on Linux
There is a very useful site called GTFOBins that has details about lots of different *NIX binaries, and how they can be used to privesc or perform various other actions. Going through the list of SUID ...
- 9,307
13
votes
Escalating user privileges on Linux
There's a fairly well-known exploit on chfn: https://github.com/advisories/GHSA-5896-67mw-rv4j
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The ...
- 237
10
votes
Escalating user privileges on Linux
Among those binaries, that date is setuid seems very suspicious, as spotted by marcelm
If you look at the options supported by date, it has a -f option which displays the time described by each line ...
- 18.8k
1
vote
How to mitigate spoofing, keylogging password, stealing public key with smart card with external/internal smart card reader?
First of all, I think it's worth talking about some terms. A public key is the half of a key which is public; that is, it is assumed everybody on the planet can know it without having any impact on ...
- 9,294
Only top scored, non community-wiki answers of a minimum length are eligible