linux-privilege-escalationlisted

# SKILL: Linux Privilege Escalation — Expert Attack Playbook > **Scope**: Expert Linux privesc techniques. Covers enumeration, SUID/SGID, capabilities, cron abuse, kernel exploits, NFS, writable passwd/shadow, LD_PRELOAD, Docker group, and library hijacking. Includes subtle escalation paths through capabilities and combined misconfigurations. ## Related Skills Before going deep, see also: - `container-escape-techniques` when the target is a container and you need to escape to host - `linux-security-bypass` when facing restricted shells, AppArmor, SELinux, or seccomp - `linux-lateral-movement` after obtaining root for pivoting to adjacent hosts - `kubernetes-pentesting` when the host is a Kubernetes node ### Advanced Reference Also load [SUID_CAPABILITIES_TRICKS.md](./SUID_CAPABILITIES_TRICKS.md) when you need: - Top 30 SUID binaries with exact exploitation commands (GTFOBins) - Capability-specific exploitation for each dangerous cap - Custom SUID binary exploitation methodology Also load [KERNEL_EXPLOITS_CHECKLIST.md](./KERNEL_EXPLOITS_CHECKLIST.md) when you need: - Kernel version → exploit mapping table (DirtyPipe, DirtyCow, OverlayFS, etc.) - Exploit compilation tips and cross-compilation notes - Kernel exploit stability assessment --- ## 1. ENUMERATION CHECKLIST Run these immediately after landing a shell: ### System Info ```bash uname -a # Kernel version cat /etc/os-release # Distro and version cat /proc/version