Titles in "SUDO and SUID" section

Titles in "SUDO and SUID" section, removing duplicates or not so good reference
This commit is contained in:
Victor Ramos Mello 2019-12-13 11:01:08 +01:00 committed by GitHub
parent ae06f239b9
commit e5f045afaa
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -58,11 +58,10 @@ old-school Unix hacking technique, that will still work in 2013.
- [Breaking out of rbash using scp](http://pentestmonkey.net/blog/rbash-scp) - [Breaking out of rbash using scp](http://pentestmonkey.net/blog/rbash-scp)
### SUDO and SUID ### SUDO and SUID
- https://gtfobins.github.io/ - [GTFOBins](https://gtfobins.github.io/): GTFOBins is a curated list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.
- https://touhidshaikh.com/blog/?cat=21 - [Abusing SUDO](https://touhidshaikh.com/blog/?p=790): Some of the binary which helps you to escalate privilege using the sudo command.
- https://www.securusglobal.com/community/2014/03/17/how-i-got-root-with-sudo/ - [Sudo (LD_PRELOAD)](https://touhidshaikh.com/blog/?p=827): Privilege Escalation from an LD_PRELOAD environment variable.
- https://touhidshaikh.com/blog/?p=790 - [How I got root with Sudo](https://www.securusglobal.com/community/2014/03/17/how-i-got-root-with-sudo/)
- https://www.pentestpartners.com/security-blog/exploiting-suid-executables/
### Capabilities ### Capabilities
- http://blog.sevagas.com/?POSIX-file-capabilities-the-dark-side - http://blog.sevagas.com/?POSIX-file-capabilities-the-dark-side