Linux Category

Basic commands, enumeration checklists, SUID, capabilities, and misconfig—all designed to help you find your way to root as quickly as possible.

blog
21+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit
Linux Category -

Linux blog

Filters

  • Linux Persistence: Post-Exploitation Persistence Techniques
    linux

    Linux Persistence: Post-Exploitation Persistence Techniques

    A Guide to Linux Post-Exploitation Persistence: Systemd, Cron, SSH, Udev, LKM, Capabilities, and Other Persistence Mechanisms on Linux.

    Discover more Discover more
  • Kubernetes Pentesting: RBAC, Secrets, PrivEsc and Kubectl
    linux

    Kubernetes Pentesting: RBAC, Secrets, PrivEsc and Kubectl

    Kubernetes pentest: How a stolen token in a Pod leads, via RBAC and nodes/proxies, to privilege escalation and root shell on the node, with kubectl and cheatsheet.

    Discover more Discover more
  • Bash: A Complete Guide to Linux, Commands, and Scripting
    linux

    Bash: A Complete Guide to Linux, Commands, and Scripting

    What is Bash and how does it work? Learn Bash commands, variables, pipes, permissions, and scripting with a practical, groundbreaking guide designed for Linux and cybersecurity.

    Discover more Discover more
  • SSH Hardening on Linux: sshd_config, Ed25519 and Fail2Ban
    linux

    SSH Hardening on Linux: sshd_config, Ed25519 and Fail2Ban

    SSH hardening on Linux: Configure sshd_config, Ed25519, Fail2Ban, UFW, and 2FA keys; verify algorithms and logins with ssh-audit; and create a jump host.

    Discover more Discover more
  • Linux Enumeration: commands and tools for Privilege Escalation
    linux

    Linux Enumeration: commands and tools for Privilege Escalation

    Linux enumeration step-by-step: Use manual commands, SUID, sudo, capabilities, cron, LinPEAS, LinEnum, and LSE to detect privilege escalation vectors.

    Discover more Discover more
  • Linux Groups for Privilege Escalation: Docker, LXD, and Disk
    linux

    Linux Groups for Privilege Escalation: Docker, LXD, and Disk

    Linux privilege escalation via 40+ Linux groups: disk, Docker, LXD, Incus, MicroK8s, libvirt, shadow, video, adm, input, ssl-cert, KVM, sudo/wheel, lpadmin.

    Discover more Discover more
  • LinPEAS: Automated Linux Privilege Escalation and Enumeration
    linux

    LinPEAS: Automated Linux Privilege Escalation and Enumeration

    Learn how to use LinPEAS for Linux privilege escalation enumeration: SUID, sudo, cron, capabilities, kernel exploits, PATH hijacking, and CTF scenarios with real command examples.

    Discover more Discover more
  • Fail2Ban Privilege Escalation: Linux Exploit to Gain Root
    linux

    Fail2Ban Privilege Escalation: Linux Exploit to Gain Root

    Learn how to exploit a Fail2Ban misconfiguration, what it is, and how to gain root on Linux: enumeration, exploit, ban triggers, detection, and hardening.

    Discover more Discover more
  • Top 100 Linux Commands: Essential Hacking List
    linux

    Top 100 Linux Commands: Essential Hacking List

    Top 100 Linux commands: a comprehensive and practical list for pentesters and sysadmins. Essential for enumeration, exploits, and post-exploitation.

    Discover more Discover more
  • linux

    Linux PrivEsc: Real root escalation techniques

    Linux PrivEsc: Real-world privilege escalation techniques for gaining root. Practical workflow from real-world CTFs and pentests.

    Discover more Discover more
  • Container Escape: Privilege Escalation Docker and Kubernetes
    linux

    Container Escape: Privilege Escalation Docker and Kubernetes

    Container Escape: Docker sockets, privileged containers, Linux capabilities, Kubernetes, kernel exploits, and IMDS. Privilege escape techniques, detection, and defense.

    Discover more Discover more
  • Kernel Exploits: Real Privesc on Linux and Windows
    linux

    Kernel Exploits: Real Privesc on Linux and Windows

    Kernel exploits: real-world privilege escalation techniques on Linux and Windows. From theory to practical lab exploits.

    Discover more Discover more
  • Pspy: Monitor Linux Processes Without Root Privileges
    linux

    Pspy: Monitor Linux Processes Without Root Privileges

    Pspy is a tool for observing processes and cron jobs running on Linux without root privileges. It's ideal for identifying privilege escalation vectors.

    Discover more Discover more
  • Lynis: Linux Security Auditing and Hardening Tool
    linux

    Lynis: Linux Security Auditing and Hardening Tool

    Lynis is an auditing tool for Unix/Linux systems that analyzes configurations, permissions, patches, and hardening. Ideal for penetration testers and blue teams.

    Discover more Discover more
  • Mimipenguin: Dump Linux Credentials from Memory (Post-Exploitation)
    linux

    Mimipenguin: Dump Linux Credentials from Memory (Post-Exploitation)

    Mimipenguin is a post-exploitation script for Linux that extracts cleartext passwords from the memory of processes such as SSH, sudo, and display managers.

    Discover more Discover more
  • LinEnum: Linux Enumeration Script for Privilege Escalation
    linux

    LinEnum: Linux Enumeration Script for Privilege Escalation

    LinEnum is a Bash script for automatic enumeration on Linux systems, useful for identifying privilege escalation vectors post-exploitation.

    Discover more Discover more
  • LinPEAS: Linux Privilege Escalation Enumeration Script
    linux

    LinPEAS: Linux Privilege Escalation Enumeration Script

    LinPEAS is an automatic enumeration script for Linux that identifies SUIDs, capabilities, exposed credentials, and privilege escalation vectors.

    Discover more Discover more
  • GTFOBins: Linux Binary Abuse for Privilege Escalation
    linux

    GTFOBins: Linux Binary Abuse for Privilege Escalation

    GTFOBins is the definitive database for exploiting legitimate Linux binaries to escalate privilege, bypass sudo, and escape shells in authorized labs.

    Discover more Discover more
  • Getcap: Linux Capabilities for Privilege Escalation
    linux

    Getcap: Linux Capabilities for Privilege Escalation

    Getcap allows you to detect files with Linux capabilities to identify privilege escalation vectors without SUID. This is a key post-exploitation technique.

    Discover more Discover more
  • Chkrootkit: Rootkit Detection on Linux for Incident Response and Post-Exploitation Analysis
    linux

    Chkrootkit: Rootkit Detection on Linux for Incident Response and Post-Exploitation Analysis

    Chkrootkit is a Linux tool for detecting rootkits and indicators of compromise on Unix-like systems. It is used in incident response and post-exploitation analysis to verify persistence and backdoors.

    Discover more Discover more
  • Crontab Backdoor: Linux Persistence with Cron Jobs in Penetration Testing
    linux

    Crontab Backdoor: Linux Persistence with Cron Jobs in Penetration Testing

    Crontab Backdoor: A practical guide to creating Linux persistence with cron jobs in penetration testing. Complete setup, evasion, and cleanup.

    Discover more Discover more