Hot answers tagged

19 votes

Escalating user privileges on Linux

There is a very useful site called GTFOBins that has details about lots of different *NIX binaries, and how they can be used to privesc or perform various other actions. Going through the list of SUID ...
Gh0stFish's user avatar
  • 9,307
13 votes

Escalating user privileges on Linux

There's a fairly well-known exploit on chfn: A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The ...
user4867444's user avatar
10 votes

Escalating user privileges on Linux

Among those binaries, that date is setuid seems very suspicious, as spotted by marcelm If you look at the options supported by date, it has a -f option which displays the time described by each line ...
Ángel's user avatar
  • 18.8k
1 vote

How to mitigate spoofing, keylogging password, stealing public key with smart card with external/internal smart card reader?

First of all, I think it's worth talking about some terms. A public key is the half of a key which is public; that is, it is assumed everybody on the planet can know it without having any impact on ...
bk2204's user avatar
  • 9,294

Only top scored, non community-wiki answers of a minimum length are eligible