New answers tagged

0 votes

System encryption on a uefi system?

Encrypting the boot partition (I used to do that) would make it substantially harder for an attacker to compromise your system after gaining physical access. Replacing init or linux image is trivial ...
Robert Cutajar's user avatar
0 votes

Ordering of the PATH environment variable

As this page is now the first or second search result for queries about Linux path precedence, path order, etc. it seems worth adding an explicit short answer: PATH order precedence is determined ...
Excalibur's user avatar
  • 231
9 votes

Escalating user privileges on Linux

Among those binaries, that date is setuid seems very suspicious, as spotted by marcelm If you look at the options supported by date, it has a -f option which displays the time described by each line ...
Ángel's user avatar
  • 18.8k
13 votes

Escalating user privileges on Linux

There's a fairly well-known exploit on chfn: https://github.com/advisories/GHSA-5896-67mw-rv4j A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The ...
user4867444's user avatar
18 votes
Accepted

Escalating user privileges on Linux

There is a very useful site called GTFOBins that has details about lots of different *NIX binaries, and how they can be used to privesc or perform various other actions. Going through the list of SUID ...
Gh0stFish's user avatar
  • 9,122
1 vote

How to mitigate spoofing, keylogging password, stealing public key with smart card with external/internal smart card reader?

First of all, I think it's worth talking about some terms. A public key is the half of a key which is public; that is, it is assumed everybody on the planet can know it without having any impact on ...
bk2204's user avatar
  • 9,284
2 votes

Is WSL 2 secure for commercial work?

So, you can disable the WSL2 integration to some extent. Just have a look at the contents of the file /etc/wsl.conf to see how your WSL2 instance is setup. Use this command to do so: $ cat /etc/wsl....
mike510a's user avatar
  • 121

Top 50 recent answers are included