倾旋的博客

倾旋的博客

现阶段在进行有效性验证/攻击模拟相关的安全研究工作,我的博客会记录一些我的学习过程和部分安全技术研究成果。

19 Dec 2018

Intranet Space - Linux Privilege

0x00 LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

Github:https://github.com/rebootuser/LinEnum

Usage:https://github.com/rebootuser/LinEnum/blob/master/README.md

Example:$ ./ LinEnum.sh -s -k keyword -r report -e / tmp / -t

0x01 linux-exploit-suggester

Often during the penetration test engagement the security analyst faces the problem of identifying privilege escalation attack vectors on tested Linux machine(s). One of viable attack vectors is using publicly known Linux exploit to gain root privileges on tested machine. Of course in order to do that the analyst needs to identify the right PoC exploit, make sure that his target is affected by the associated vulnerability and finally modify the exploit to suit his target. The linux-exploit-suggester.sh tool is designed to help with these activities.

Usage:https://github.com/mzet-/linux-exploit-suggester#usage

Example:$ ./linux-exploit-suggester.sh