Linux Privilege Escalation for Beginners
HTML-код
- Опубликовано: 29 июн 2024
- 0:00 - Overview
1:46 - Course Introduction
9:54 - Course Tips & Resources
15:50 - Gaining a Foothold: Intro and Shell Access
23:13 - System Enumeration
29:28 - User Enumeration
34:27 - Network Enumeration
38:43 - Password Enumeration
44:41 - Automated Tools Intro
49:28 - Exploring Automated Tools
1:01:16 - Kernel Exploits Overview
1:04:45 - Escalation via Kernel Exploits
1:10:55 - Passwords and File Permissions Overview
1:11:37 - Escalation via Stored Passwords
1:20:14 - Escalation via Weak File Permissions
1:30:58 - Escalation via SSH Keys
1:36:45 - Sudo Overview
1:38:07 - Escalation via Sudo Shell Escaping
1:44:54 - Escalation via Intended Functionality
1:49:41 - Escalation via LD_PRELOAD
1:56:50 - Challenge Overview
1:58:16 - Challenge Walkthrough
2:11:07 - CVE-2019-14287 Overview
2:14:30 - Escalation via CVE-2019-14287
2:17:12 - Overview and Escalation via CVE-2019-18634
2:24:02 - SUID Overview
2:32:31 - Gaining a Foothold
2:45:41 - Escalation via SUID
2:52:23 - Conclusion
Full course: academy.tcm-sec.com/p/linux-p...
Pentests & Security Consulting: tcm-sec.com
Get Trained: academy.tcm-sec.com
Get Certified: certifications.tcm-sec.com
Merch: merch.tcm-sec.com
Sponsorship Inquiries: info@thecybermentor.com
📱Social Media📱
___________________________________________
Twitter: / thecybermentor
Twitch: / thecybermentor
Instagram: / thecybermentor
LinkedIn: / heathadams
TikTok: / thecybermentor
Discord: / discord
💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:
/ thecybermentor
Support the stream (one-time): streamlabs.com/thecybermentor
Hacker Books:
Penetration Testing: A Hands-On Introduction to Hacking: amzn.to/31GN7iX
The Hacker Playbook 3: amzn.to/34XkIY2
Hacking: The Art of Exploitation: amzn.to/2VchDyL
The Web Application Hacker's Handbook: amzn.to/30Fj21S
Real-World Bug Hunting: A Field Guide to Web Hacking: amzn.to/2V9srOe
Social Engineering: The Science of Human Hacking: amzn.to/31HAmVx
Linux Basics for Hackers: amzn.to/34WvcXP
Python Crash Course, 2nd Edition: amzn.to/30gINu0
Violent Python: amzn.to/2QoGoJn
Black Hat Python: amzn.to/2V9GpQk
My Build:
lg 32gk850g-b 32" Gaming Monitor:amzn.to/30C0qzV
darkFlash Phantom Black ATX Mid-Tower Case: amzn.to/30d1UW1
EVGA 2080TI: amzn.to/30d2lj7
MSI Z390 MotherBoard: amzn.to/30eu5TL
Intel 9700K: amzn.to/2M7hM2p
G.SKILL 32GB DDR4 RAM: amzn.to/2M638Zb
Razer Nommo Chroma Speakers: amzn.to/30bWjiK
Razer BlackWidow Chroma Keyboard: amzn.to/2V7A0or
CORSAIR Pro RBG Gaming Mouse: amzn.to/30hvg4P
Sennheiser RS 175 RF Wireless Headphones: amzn.to/31MOgpu
My Recording Equipment:
Panasonic G85 4K Camera: amzn.to/2Mk9vsf
Logitech C922x Pro Webcam: amzn.to/2LIRxAp
Aston Origin Microphone: amzn.to/2LFtNNE
Rode VideoMicro: amzn.to/309yLKH
Mackie PROFX8V2 Mixer: amzn.to/31HKOMB
Elgato Cam Link 4K: amzn.to/2QlicYx
Elgate Stream Deck: amzn.to/2OlchA5
*We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites. 
Наука
Just finished this last month. Listen. Get the freakin course. $30 is nothing to the knowledge you will gain. Keep killing it heath!
What's the difference between this video and the $30 course?
About 3.5 hours of additional content.
Thank you, Anony, for the nice words
@@TCMSecurityAcademy good to know. Thx
I'm starting up PEH for the second time after life got really busy last time. But I own like six classes. I plan to keep truckin this time and finish all of the classes. It really is top notch.
Thank you for these amazing courses
Struggled with privilege escalation and then there was this video. Settled that knowledge gap. Thanks for the effort you put into this. Cheers!
Keep going, I really appreciate your content ❤️
I like your work. Keep going dude !💪💪
Was waiting for this💥❤️...thankyou💯
thanks man u r adding a lot of value to the community ❤ keep it up
hi, yesterday i look your great content, you a very good trainer for this. today i buy the complete course. that is 6.5 hours!
Really excited ❤️
Loved it man..thanks for helping me get started😊
Dude, every time I watch your stuff it starts to have more stuff click. I watch hackerspoilt and a few others that have furthered my understanding in the pen testing area. Hope to see more from you dude.
Thanks a lot for this video 😊
Thank you so much, I am doing my first HTB and I have gotten myself onto the server and have run out of things I know how to do 😂
wow sir this is great thank you so much
Gahhhh make more of these videos. These are awesomeeee
Thank you I have bought a couple of courses from you did not get to this one yet.
cool course thanks heath
thank you so much
Thank You
I also tried to scp the tools folder to my machine failed too, but it's a grate machine, good for practicing
I will buy all this guy courses
As i am saving for oscp , i guess i will binge watch membership courses for a month😅
Really good video. I’m wondering and looking for a video on gaining access (getting a shell). I’d like to present and explore the idea of of hacking in order of concept to my cyber babies.
woah 3h nice
I wished you would had said you were in the water 😂......great vid , explained on point 👌
එලම FT Ft
Thanks, is there any video of windows?
Hello and. Thank you .
❤❤❤
I tried to download kali linux custom image from offensive security. However I couldn't find any custom image in offensive security.
ohhh tanks
very expected video
What color is your lambo?
can these concepts also be applied to android?
hi bro i just saw your server for the user I have to connect through RDP I couldn't know how so please help. when I try to connect how you told it shows connection refused. so please help thank you.
1:51:42 what should do if every sudo command required password and i don't know the sudo password
if i got telnet access to machine (ofc no GUI) how i run the ./linpeas script?
First comment love you from anonymous 💪
Wow
please make video on red teaming
😃
i can't ssh into root using id_rsa :(
Im old fan & sub here plz answer me qst !!
i want to start bug bounty but i have small knowldge so i make this roadmap for bug bounty as background what u think any advice and thak u alot !
- Kali linux basics
- HTML & CSS & JavaScript (Basics)
- PHP = Basic
- Web Basics(HTTP & Protocols ....)
- Install Burp Suit and Learn it
- Practice Portswiger & free labs
- Owsap Top 10
Old as in age? First comment on this channel was a month ago. If you were a fan you would know he would never answer a question like this. You can find the answers on google. My advice, learn the basics of IT.
1:08:25 lol what if I don't have everything put together for me?
Upload window privilege escalation
ld_preload ftw
This linux? (kali, parrot..)
Hi, i wanted to talk to u one time. I need to get a job, Done binary development for years. ELF file (capabilities + Shellcode + PTY/TTY + vcsa), You will know what i mean. I get your contact details . Only thing i have not had a job in computers only done self teaching and had a driving job. So need to get my CV updated. I can get into Linux systems pretty quick. Mainly Shellcode but run system + syscalls to execute python code . etc etc. I also use python scapy if im attacking network protocols. This stuff has took me like 7 years + to master. Will be in touch. Cheers
root
↑
user
I think I may be one of a few being targeted by the terror group
shell.c file can we make it in python?