Linux Privilege Escalation 2024 | C 20/29 | SUID/SGID Shared Object Injection | PentestHint
Welcome to our comprehensive Linux Privilege Escalation course! With 29 in-depth videos, we cover everything from basic Linux commands to advanced privilege escalation techniques. Perfect for beginners and seasoned professionals, this course includes practical sessions and real-world scenarios to enhance your cybersecurity skills. Learn how to exploit system vulnerabilities, configure TryHackMe and HackTheBox, and master the art of privilege escalation on Linux systems. Don’t miss out on this essential training for any cybersecurity enthusiast! Whether you’re a beginner or an experienced user, this course covers all the essential topics, from basic Linux commands to advanced exploitation methods. Enhance your cybersecurity skills with hands-on practical sessions and real-world scenarios
**Course Outline:**
**L1: Introduction**
Kickstart your journey with an overview of Linux privilege escalation. Understand the importance and scope of this critical cybersecurity skill.
**L2: Kali Linux Setup**
Learn how to set up Kali Linux, the premier platform for penetration testing and security research.
**L3: Linux File System**
Dive into the Linux file system structure, essential for navigating and exploiting Linux environments.
**L4: Linux Basic Commands**
Master the fundamental Linux commands that form the foundation of system administration and exploitation.
**L5: File Permission in Linux**
Explore the intricacies of Linux file permissions and their implications for security.
**L6: Privilege Escalation in Linux**
Understand the core concepts of privilege escalation and its impact on system security.
**L7: System Enumeration**
Learn techniques for gathering information about the target system, a crucial step in any penetration test.
**L8: User Enumeration**
Discover methods for identifying and analyzing user accounts on a Linux system.
**L9: Network Enumeration**
Gain insights into network enumeration techniques to uncover valuable information about network infrastructure.
**L10: TryHackMe Setup**
Set up and configure TryHackMe for practical, hands-on experience in a controlled environment.
**L11: HackTheBox Setup**
Learn how to use HackTheBox for real-world penetration testing practice.
**L12: Readable /etc/shadow**
Explore vulnerabilities related to readable /etc/shadow files and how to exploit them.
**L13: Writable /etc/shadow**
Understand the security risks and exploitation techniques associated with writable /etc/shadow files.
**L14: Writable /etc/passwd**
Learn about the implications and exploitation of writable /etc/passwd files.
**L15: Fundamentals of Cron Jobs**
Get to grips with cron jobs and how they can be abused for privilege escalation.
**L16: File Permissions**
Delve deeper into Linux file permissions and how misconfigurations can be exploited.
**L17: Path Environment Variable**
Understand the role of the PATH environment variable in privilege escalation.
**L18: Wildcards**
Learn how to leverage wildcards in Linux for potential exploitation.
**L19: Known Exploits**
Familiarize yourself with well-known exploits and how to use them effectively.
**L20: Shared Object Injection**
Discover the technique of shared object injection and its role in privilege escalation.
**L21: Environment Variables**
Explore various environment variables and how they can be exploited for privilege escalation.
**L22: Abusing Shell Features**
Learn how to abuse shell features to escalate privileges on a Linux system.
**L23: Fundamentals of Kernel**
Gain a foundational understanding of the Linux kernel and its security implications.
**L24: Practical Session**
Put your knowledge into practice with a hands-on practical session.
**L25: Fundamentals of Capabilities**
Learn about Linux capabilities and their role in system security and exploitation.
**L26: Practical Session**
Another practical session to reinforce your learning with real-world scenarios.
**L27: Fundamentals of NFS**
Understand the fundamentals of Network File System (NFS) and its potential vulnerabilities.
**L28: Practical Session**
Engage in a practical session focused on exploiting NFS vulnerabilities.
**L29: Automated Scripts**
Learn how to use automated scripts for efficient and effective privilege escalation.
**Tags:**
#LinuxPrivilegeEscalation #KaliLinux #Cybersecurity #PenetrationTesting #EthicalHacking #SystemEnumeration #UserEnumeration #NetworkEnumeration #TryHackMe #HackTheBox #FilePermissions #CronJobs #EnvironmentVariables #KernelSecurity #NFSExploitation #AutomatedScripts #KnownExploits #SharedObjectInjection #chandanghodela #pentesthint #linux #privilege #escalation #oscp #oscpprepration #cybersecuritycourse
by PentestHint – The Tech Fellow
linux foundation
