# Linux-Privilege-Escalation-MindMap | OSCP Privilege Escalation MindMap/Guide

**URL:** <https://onehack.st/t/linux-privilege-escalation-mindmap-oscp-privilege-escalation-mindmap-guide/211759>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking\
**Created:** [January 10, 2022, 8:58am UTC](https://onehack.st/t/linux-privilege-escalation-mindmap-oscp-privilege-escalation-mindmap-guide/211759 "2022-01-10T08:58:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [January 10, 2022, 8:58am UTC](https://onehack.st/t/linux-privilege-escalation-mindmap-oscp-privilege-escalation-mindmap-guide/211759/1 "2022-01-10T08:58:28Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/a/a/aa787717862c31b5f189d2f65f892cd37510c082.png)

OSCP Privilege Escalation MindMap/Guide

#### Connect with me:

[![Twitter Badge](https://camo.githubusercontent.com/137189ad3bfa5cba08d98c8c27eef6fa5ae3bd79c1e21fdb76711530a3e0616d/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f2d40787472656d6570656e746573742d3163613066313f7374796c653d666c6174266c6162656c436f6c6f723d316361306631266c6f676f3d74776974746572266c6f676f436f6c6f723d7768697465266c696e6b3d68747470733a2f2f747769747465722e636f6d2f787472656d6570656e74657374)](https://twitter.com/xtremepentest) [![Twitter Badge](https://camo.githubusercontent.com/5c269afb53b2d698a1a023e2953c93a318d1150c69028ce2acc962e68bc599d2/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f2d404f78545241572d3163613066313f7374796c653d666c6174266c6162656c436f6c6f723d316361306631266c6f676f3d74776974746572266c6f676f436f6c6f723d7768697465266c696e6b3d68747470733a2f2f747769747465722e636f6d2f307854524157)](https://twitter.com/0xTRAW)

_ **The MindMaps comes in different formats and there are located in the MindMaps folder** _

Supported Formats:

- png
- svg
- docx
- md
- xlsx
- opml
- pdf

## Credential Harvesting {Passwords/Keys}

- SSH keys
- Reused Passwords
- Credentials from Bash History / Bash History Files
- Credentials From Configuration Files
- Credentials From Local Databases

#### Automated Tools

- LinPEAS
- LinEnum

## Exploits

- Kernel Version
- Binary File Versions
- Services Running On Local Host

#### Automated Tools

- Linux Exploit Suggester

## Misconfigurations

- Sudo Access (Sudo -l)
- Abusing Intended Binary Functionality
- SUID / SGID Executables

### Weak File Permissions on Sensitive Files

```auto
                     {WRITABLE}

```

- /etc/passwd
- /etc/shadow
- /etc/sudoers
- Configuration Files

### Weak File Permissions on Sensitive Files

```auto
                     {READABLE}

```

- /etc/shadow
- /root/.ssh/id\_rsa {SSH Private Keys}

### Writable PATH

- Root $PATH Env Variable Writable
- Directory in $PATH Writable

### Cron Jobs

- Writable Cron Jobs
- Writable Cron Jon Dependency File

```auto
      {Python File etc}

```

### Environment Variables

- LD\_PRELOAD set in /etc/sudoers

### NFS {user is root and root squashing is enabled}

## GitHub:

> **[GitHub - thatstraw/Linux-Privilege-Escalation-MindMap: OSCP Privilege Escalation MindMap/Guide](https://github.com/thatstraw/Linux-Privilege-Escalation-MindMap)**
>
> OSCP Privilege Escalation MindMap/Guide