Module 4B. Post-Exploitation - Linux Privilege Escalation

What is the main goal of Privilege Escalation

• To increase your access and control on the exploited machine
• To delete user accounts
• To increase system performance
• To simplify system administration

What are the two types of privilege escalation?

• Vertical and Diagonal
• Horizontal and Vertical
• Internal and External
• Systematic and Random

What are the primary factors that enable privilege escalation?

• User negligence and system updates
• Strong passwords and firewalls
• Vulnerabilities and misconfigurations
• Encrypted files and secure networks

How does the sudo command contribute to privilege escalation?

• It limits user permissions
• It allows running commands with another user's privileges
• It tracks user activity
• It simplifies system management

What is the purpose of SUID permissions in Linux?

• To restrict file access to root only
• To delete files securely
• To execute a file with the permissions of the file owner
• To encrypt file contents

What is a critical aspect of managing file permissions in Linux for security?

• Regularly changing file names
• Preventing unauthorized user access to files
• Increasing the number of file backups
• Ensuring files are readable by all users

Why is the /etc/shadow file important in Linux?

• It contains encrypted password information for user accounts
• It lists all the installed software
• It stores the system's network configurations
• It logs user activity on the system

What makes world writable files a security risk?

• They can be read by anyone
• They can be altered by anyone
• They cannot be deleted
• They are automatically encrypted

How can cronjobs be exploited for privilege escalation?

• By deleting all scheduled tasks
• By changing the execution time of tasks
• By altering scripts executed by cronjobs
• By creating new cronjobs

What is a key security concern with cronjobs in Linux?

• They consume too much CPU
• They are difficult to configure
• They run with the privileges of the user who sets them
• They can only be created by the root user