Linux Privesc Checklist

Adapt it to your methodology and the context of your test. Download this file locally from here this way you can check everything you have done.

• Enumerate system

  • See here

• Enumerate user

  • See here

• Enumerate network

  • See here

• Enumerate password

  • See here

• Check for password and file permissions

  • See here and here

• Check for Sudo

  • See here

• Check for SUID

  • See here

• Check for Capabilities

  • See here

• Check for Scheduled Tasks

  • See here

• Check for NFS Root Squashing

  • See here

• Check Services

  • See here

• Check for PATH Abuse

  • See here

• Check for Wildcard Abuse

  • See here

• Check for Privilege groups

  • See here

• Check for Kernel Exploits

  • See here

• Check for homemade scripts

Other checklists

• Linux Privesc Checklist - PayloadAllTheThings