Beginner's Guide to GTFO-Bins Linux privilege escalation

preview_player
Показать описание
Welcome to a guide on leveraging GTFO-Bins and sudo misconfigurations (lax security policies) to escalate from standard Linux user to root. By the end of this video you'll be able to check for sudo bin escalations and easily take over a server with just a few lines of input.

I will also walk you through a vulnhub vm that helped me understand HOW and WHAT to do with GTFO-Bins binaries. I've seen the technique mentioned in priv esc guides, but this vm made it all crystal clear and now I'll be sharing those techniques back with the cybersec/netsec community.

Links:

Shoutouts:
Stok, LiveOverflow, The Cyber Mentor, IppSec and all the HTB creators, contributors, and hackers for inspiring me to share back with a community that gives so much to everyone involved!

HACK THE PLANET!
Рекомендации по теме
Комментарии
Автор

26:00 if you forgo the ./ before script and just put exactly

sudo script -q /dev/null

you should be able to become root, now why that is the question...thank you for the video!

nullnoob
Автор

When are we supposed to use the "shell" option in GTFO-bins and not the "sudo" one?

riccardosciaraffa
Автор

Thanks!
Lovely walkthrough.
Greetings from Brazil.

ViolettSnake
Автор

Thanks!!!
Please keep making the vidoes!

xyzabc
Автор

This video is insanely useful! Subscribed and excited for your next video!

joshuablake