In this video, we begin talking about permissions in the Linux filesystem and how they can be abused.
📚 Resources:
- BlueDaBaDee repo: https://github.com/pyukey/BlueDaBaDee
- Slides: https://docs.google.com/presentation/d/1PYh9jk2Yy4bBUHNv5hopTbBcSGVAq4tYwKzz69T2flg/edit?usp=sharing
- This blog explains file permissions in more detail: https://tbhaxor.com/linux-file-permissions/
- This blog explains the SUID bit in more detail: https://tbhaxor.com/demystifying-suid-and-sgid-bits/
- GTFOBins: https://gtfobins.github.io/
- LSE: https://github.com/diego-treitos/linux-smart-enumeration
- LinPEAS: https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS
TIMESTAMPS
- 00:00 File permissions
- 04:57 The SUID bit
- 07:33 GTFOBins - RED
- 08:30 Securing SUID - BLUE
- 09:28 Demo vulns
