This website is a virtual proof that I'm awesome https://jurisjunction.github.io/ Using the PATH setting to escalate privileges - One vector to escalate privileges is to make use of our low-priv user’s PATH, when we can write to a directory in the PATH. If we can find some binary or script that executes as root that makes use of PATH (rather than using absolute paths), we might be able... Mon, 07 Apr 2025 00:00:00 -0400 https://jurisjunction.github.io/2025-04-07-thm-linux-privilege-escalation-path.md/ https://jurisjunction.github.io/2025-04-07-thm-linux-privilege-escalation-path.md/ Making us of Cron schedules jobs to elevate privileges - In this task of the Linux Privilege Escalation room the idea is that a low privilege user can check to see what manually scheduled jobs are listed in /etc/crontab (all users are able to read this file). If there’s any script there that is 1) run by root, and 2)... Sun, 06 Apr 2025 00:00:00 -0400 https://jurisjunction.github.io/2025-04-06-thm-linux-privilege-escalation-cron-jobs.md/ https://jurisjunction.github.io/2025-04-06-thm-linux-privilege-escalation-cron-jobs.md/ Using binaries with SUID set to escalate - It’s time for some more privilege escalation! This time it’s about checking what binaries have SUID bit set. Getting the lay of the land Our first question is asking about which user has a name of a famous comic book writer. This tells us we’re going to need to read... Sat, 05 Apr 2025 00:00:00 -0400 https://jurisjunction.github.io/2025-04-05-thm-linux-privilge-escalation-suid.md/ https://jurisjunction.github.io/2025-04-05-thm-linux-privilge-escalation-suid.md/ Misusing sudo - Nature of the Task In this task the goal is to use use sudo in a variety of ways to access information that would normally be out of limits to a low privilege user. A bit of sudo recon… The first thing to do is to to run sudo -l... Sat, 05 Apr 2025 00:00:00 -0400 https://jurisjunction.github.io/2025-04-05-thm-linux-privilege-escalation-sudo.md/ https://jurisjunction.github.io/2025-04-05-thm-linux-privilege-escalation-sudo.md/ Making use of CVE-2015-1328 to get root - Enumeration The kernel exploitation task of TryHackMe’s Linux Privilege Escalation room required me to take advantage of a known vulnerability of the kernel of the task’s VM. Before I could find an exploit, I had to determine the version of the Linux kernel on the VM. For this I used... Sat, 05 Apr 2025 00:00:00 -0400 https://jurisjunction.github.io/2025-04-05-thm-linux-privilege-escalation-kernel-exploitation/ https://jurisjunction.github.io/2025-04-05-thm-linux-privilege-escalation-kernel-exploitation/ There's lots to learn! - This is a demo post to show you how to write blog posts with markdown. I strongly encourage you to take 5 minutes to learn how to write in markdown - it’ll teach you how to transform regular text into bold/italics/tables/etc.I also encourage you to look at the code that... Fri, 28 Feb 2020 00:00:00 -0500 https://jurisjunction.github.io/2020-02-28-sample-markdown/ https://jurisjunction.github.io/2020-02-28-sample-markdown/ Excerpt from Soulshaping by Jeff Brown - Under what circumstances should we step off a path? When is it essential that we finish what we start? If I bought a bag of peanuts and had an allergic reaction, no one would fault me if I threw it out. If I ended a relationship with a woman who... Wed, 26 Feb 2020 00:00:00 -0500 https://jurisjunction.github.io/2020-02-26-flake-it-till-you-make-it/ https://jurisjunction.github.io/2020-02-26-flake-it-till-you-make-it/