Find a path from a Linux shell to root access.
What it does
Guides users from a low-privilege Linux shell through finding and exploiting paths to root access.
When to use it
Use when low-privilege shell access is available and the task is to obtain root on a Linux system.
How to use it
Give it access to a low-privilege Linux shell; it enumerates the system and pursues an available route to root access.
Uses
Good to know
- cannot be undone: /etc/passwd; /etc/shadow
Latest review
What you need · 2
The target must be a Linux system with low-privilege shell access already available.
The initial enumeration calls getcap to find files with Linux capabilities.
Access · 7
This skill
/etc/passwd
Write
Changes system login records (irreversible)
/etc/shadow
Write
Replaces the root password hash (irreversible)