Q. What does the SETUID (SUID) bit indicate in Linux?

View solution

Q. How can you identify SUID files and folders on a Linux system?

View solution

Q. Why are scripts typically prevented from allowing SETUID to work in Linux?

View solution

Q. Which of the following Linux executables can be used for privilege escalation if SUID permission is set?

View solution

Q. What is the significance of the shebang (#!) in a script?

View solution

Q. In the context of privilege escalation on Linux, what does the s flag set for executables indicate?

View solution

Q. What can penetration testers potentially exploit when discovering executables with SUID or GUID bits on a Linux system?

View solution

Q. In Linux, what must penetration testers be aware of when working with different distributions and versions?

View solution

Q. How does the sudo command function in Linux, and where are the associated settings typically found?

View solution

Q. In Linux, if a sudo-capable user account can run a program as root, what potential privilege escalation opportunity does this present?

View solution

Q. What type of access may a seemingly low-privileged account with permission to run Python or Perl as root have on a Linux system?

View solution

Q. How can seemingly innocent permissions to run files lead to privilege escalation using sudo?

View solution

Q. What limitations are commonly imposed by restricted shells in Linux?

View solution

Q. How can penetration testers break out of restricted shells in Linux?

View solution

Q. When confronted with a restricted shell, what should penetration testers check to identify potential avenues for privilege escalation?

View solution

Q. What utility may be used by penetration testers to escape restricted shells in Linux?

View solution

Q. In the context of privilege escalation on Linux, what should penetration testers check regarding sudo?

View solution

Q. When dealing with a restricted shell, what elements should penetration testers check for potential exploitation?

View solution

Q. Why are Linux kernel exploits considered a favorite tool for penetration testers?

View solution

Q. How does the CVE list classify Linux kernel exploits?

View solution