Privilege escalation - Revision history

Pbug at 17:04, 30 May 2008

2008-05-30T17:04:21Z

← Older revision		Revision as of 10:04, 30 May 2008
Line 1:		Line 1:
	Privilege escalation is the process by which a user executes [[processes]] with more rights than they normally are entitled to use. This can be both good and bad.		Privilege escalation is the process by which a user executes [[process\|processes]] with more rights than they normally are entitled to use. This can be both good and bad.

	For example, allowing a user to change their own password requires write access to the <code>/etc/passwd</code> and/or <code>/etc/shadow</code> file. Under normal circumstances, users can only read <code>/etc/passwd</code>, and do nothing with <code>/etc/shadow</code>:		For example, allowing a user to change their own password requires write access to the <code>/etc/passwd</code> and/or <code>/etc/shadow</code> file. Under normal circumstances, users can only read <code>/etc/passwd</code>, and do nothing with <code>/etc/shadow</code>:

2006-04-09T01:32:51Z

← Older revision		Revision as of 18:32, 8 April 2006
Line 12:		Line 12:
	-r-sr-xr-x 1 root bin 25152 Sep 11 20:07 /usr/bin/passwd		-r-sr-xr-x 1 root bin 25152 Sep 11 20:07 /usr/bin/passwd

	Priviledge escalation is also a frequent goal of a [[cracker]] (causing a [[DoS]] is another). Typically, a cracker will attempt to exploit a [[bug]] to gain "Unauthorized Priviledge Escalation" (usually targeting the [[root]] user), ~~and so~~ take control of a system.		Priviledge escalation is also a frequent goal of a [[cracker]] (causing a [[DoS]] is another). Typically, a cracker will attempt to exploit a [[bug]] to gain "Unauthorized Priviledge Escalation" (usually targeting the [[root]] user), in order to take control of a system.

	see [[~~setuid~~]],[[~~permissions~~]].		see [[permissions]] and [[setuid]]

2006-04-09T01:20:15Z

added perl hack

← Older revision		Revision as of 18:20, 8 April 2006
Line 15:		Line 15:

	see [[setuid]],[[permissions]].		see [[setuid]],[[permissions]].


			== perl ==

			You should also change $( and $) in order to set the real and effective group IDs as well:
			($<,$>) = (getpwnam('nobody'),getpwnam('nobody'));

2005-10-24T19:32:32Z

Details.

@@ Line 1: / Line 1: @@
   $ ls -l /usr/bin/passwd
   -r-sr-xr-x  1 root  bin  25152 Sep 11 20:07 /usr/bin/passwd
-see [[setuid]].
+Priviledge escalation is also a frequent goal of a [[cracker]] (causing a [[DoS]] is another).  Typically, a cracker will attempt to exploit a [[bug]] to gain "Unauthorized Priviledge Escalation" (usually targeting the [[root]] user), and so take control of a system.

2005-10-06T16:22:52Z

← Older revision		Revision as of 09:22, 6 October 2005
Line 1:		Line 1:
	$ ls -l /usr/bin/passwd		$ ls -l /usr/bin/passwd
	-r-sr-xr-x 1 root bin 25152 Sep 11 20:07 /usr/bin/passwd		-r-sr-xr-x 1 root bin 25152 Sep 11 20:07 /usr/bin/passwd

			see [[setuid]].

2005-10-06T16:22:19Z

← Older revision		Revision as of 09:22, 6 October 2005
Line 1:		Line 1:
	$ ~~ps auxww\|grep [d]hcpd~~		$ ls -l /usr/bin/passwd
	~~_dhcp 4813~~ ~~0.0~~ ~~0.1 448 620 ??~~ ~~Ss 8:52AM 0~~:~~00.~~07 /usr/~~sbin~~/~~dhcpd xl0~~		-r-sr-xr-x 1 root bin 25152 Sep 11 20:07 /usr/bin/passwd

2005-10-06T15:49:25Z

New page

$ ps auxww|grep [d]hcpd
_dhcp 4813 0.0 0.1 448 620 ?? Ss 8:52AM 0:00.07 /usr/sbin/dhcpd xl0