The first privilege escalation technique we will be exploiting is the process of finding and cracking local account credentials in order to elevate our privileges. The following diagram illustrates the various operating systems we will using and their requirements. Our objective is to elevate our privileges to that of the “root” user on the target server. The following is a list of key techniques and sub techniques that we will be exploring:Įxploiting misconfigured SUDO Permissions User accounts with access to a specific system or performs a specific function Common approaches are to take advantage of system weaknesses, misconfigurations, and vulnerabilities. Adversaries can often enter and explore a network with unprivileged access but require elevated permissions to follow through on their objectives. Privilege Escalation consists of techniques that adversaries use to gain higher-level permissions on a system or network. Note: The techniques and tools utilized in this document were performed on Kali Linux 2021.2 Virtual Machine MITRE ATT&CK Privilege Escalation Techniques The following is a list of recommended technical prerequisites that you will need in order to get the most out of this course:įamiliarity with Linux system administration.įamiliarity with penetration testing concepts and life-cycle. The demonstrations outlined in this document were performed against a vulnerable Linux VM that has been configured to teach you the process of exploitation and privilege escalation. In order to follow along with the tools and techniques utilized in this document, you will need to use one of the following offensive Linux distributions: The use of other domains or IP addresses is prohibited. All labs and tests are to be conducted within the parameters outlined within the text.

Parrot os file permission