Linux Privilege Escalation

Enumeration

id; whoami; hostname # Basic user info
uname -a # Kernel version info
cat /etc/os-release # OS distribution info
sudo -l # Check sudo privileges

SUID

find / -perm -4000 2>/dev/null # Find SUID binaries

Capabilities

getcap -r / 2>/dev/null # List file capabilities

Cron

cat /etc/crontab # View system cron jobs
ls -la /etc/cron.* # List cron directories

Writable Files

find / -writable -type f 2>/dev/null # Find world-writable files

Tools

./linpeas.sh # Run LinPEAS enumeration script
./linux-exploit-suggester.sh # Check for kernel exploits