Automated privilege escalation enumeration and execution script for linux
Evander Marvel Kowira, N. Nik Suki, Yogeswaran Nathan · AIP conference proceedings · 2024
Privilege escalation is the act of exploiting and obtaining a higher privileged access in a target machine and is considered as one of the most crucial components in the post exploitation process of ethical hacking.However, the process of doing privilege escalation enumeration and exploitation can be challenging and overwhelming for students and novices who are starting out to learn about the subject.Aside from the complexity of the topic itself, the existing tools and resources do not provide much assistance when it comes to the topic of ease of use and readability.This paper suggests the creation of a new privilege escalation enumeration with additional features, including an automated privilege escalation exploitation and exploit suggester, aiming to enhance the learning process for students and newcomers alike. PRIVILEDGE ESCALATIONIn earlier years, privilege escalation is done by enumerating the system through examining running processes, searching for misconfigurations, and looking for exploitable programs or codes.The whole process is performed manually and can take hours or days of manual labor.As time progresses and the art of privilege escalation is perfected, security experts started to produce scripts which does automatic enumeration for privilege escalation vectors.However, these scripts are produced for experts to use, and therefore is considered daunting and hard for students and general system administrators to use.