Linux Escalation 101: Mastering SID/SUID Programs for Ultimate Control #htb

In this video, we’ll be discussing Linux privilege escalation and how to master the use of SID and SUID programs.

If you’re looking to take your linux exploitation skills to the next level, then this video is for you! We’ll be discussing how to use SID and SUID programs to gain ultimate control over systems and devices. By the end of this video, you’ll be able to use SID and SUID programs to take full control of your computer!

0:15 Loggin in HTB
0:32 No Public exploits
0:51 Discussion on SID AND SUID
0:57 Sudo Permission SUDO -l
1:31 Searching for file other access it
1:52 Interesting file
3:08 Nc and listen setup
3:58 Flag.txt

Title: How to Find and Exploit the SID/SUID Function

Introduction:
In this video, we’ll explore how to identify and exploit the SID/SUID function on a target machine. This is a critical step in gaining privileged access, and we’ll walk you through the process.

Step 1: Logging In
Begin by logging into the target machine, as provided in the Hack The Box scenario. This step is essential, whether you’re gaining initial access or attempting to elevate your privileges.

Step 2: Identifying Vulnerabilities
In a previous video, we demonstrated exploiting known public exploits. However, in this scenario, we lack such a known exploit. Our next step is to identify if any SID/SUID services are running. If you’re unfamiliar with SID/SUID, we’ve previously covered it in a video – check the card and description for reference.

Step 3: Checking Sudo Permissions
Execute the command sudo -l. This command will reveal information about the commands and operations you’re permitted to execute with sudo. This is crucial for understanding your level of access and any specific privileges granted.

Step 4: Analyzing Available Tools
Now, you may find that you have access to the openssl tool, but unfortunately, we don’t have any known vulnerabilities there. In this situation, our next step involves searching for writable files on the system, excluding the /proc directory. This search helps identify files that can be manipulated, potentially posing a security risk.

Step 5: Discovering Interesting Files
During our search, we identified two intriguing files: a backup script and an associated cron job. To proceed, open your browser and search for “pentester monkey GitHub reverseshell for bash.”

Step 6: Navigating to the Backup Script
Now, navigate to the directory in your terminal where the backup file is located. Open it using the vi editor.

Step 7: Setting Up Reverse Shell
In a separate terminal, initiate the nc command with the appropriate port number. In the vi editor, paste the one-liner code for the reverse shell. Be cautious when entering the IP address; any mistake here will prevent you from achieving a proper reverse shell.

Step 8: Success!
Congratulations, you’ve successfully elevated your access privileges on the machine. You now have the upper hand in your penetration testing efforts.