Kernel Exploits
Escalation via kernel.
Escalation via the Kernel
When configuration is locked down, the kernel itself may be the weak point. A bug in kernel code — reachable from an unprivileged process — can be exploited to execute code in ring 0 and gain root.
Identifying the Kernel
Everything starts with the exact kernel version and distro. A specific build maps to specific public CVEs and exploits.
uname -r
uname -a
cat /proc/version
cat /etc/os-releaseAll lessons in this course
- Enumeration
- SUID and Sudo Abuse
- Cron Jobs and PATH
- Kernel Exploits