Linux-Privilege-Escalation-MindMap | OSCP Privilege Escalation MindMap/Guide

OSCP Privilege Escalation MindMap/Guide

Connect with me:

Twitter Badge Twitter Badge

The MindMaps comes in different formats and there are located in the MindMaps folder

Supported Formats:

  • png
  • svg
  • docx
  • md
  • xlsx
  • opml
  • pdf

Credential Harvesting {Passwords/Keys}

  • SSH keys
  • Reused Passwords
  • Credentials from Bash History / Bash History Files
  • Credentials From Configuration Files
  • Credentials From Local Databases

Automated Tools

  • LinPEAS
  • LinEnum


  • Kernel Version
  • Binary File Versions
  • Services Running On Local Host

Automated Tools

  • Linux Exploit Suggester


  • Sudo Access (Sudo -l)
  • Abusing Intended Binary Functionality
  • SUID / SGID Executables

Weak File Permissions on Sensitive Files

  • /etc/passwd
  • /etc/shadow
  • /etc/sudoers
  • Configuration Files

Weak File Permissions on Sensitive Files

  • /etc/shadow
  • /root/.ssh/id_rsa {SSH Private Keys}

Writable PATH

  • Root $PATH Env Variable Writable
  • Directory in $PATH Writable

Cron Jobs

  • Writable Cron Jobs
  • Writable Cron Jon Dependency File
      {Python File etc}

Environment Variables

  • LD_PRELOAD set in /etc/sudoers

NFS {user is root and root squashing is enabled}


Friendly Websites