Monday, 19 February 2018

Privilege Escalation Tricks : Shell Escape and Executing Shell Commands Via GDB

Often during penetest or CTFs you might need to execute shell commands but due to limited privileges you cannot and certain time you need to escape restricted shells, . In such scenario certain techniques comes handy. Like

  • Using NMAP  
  • Using Vi Editor
  • Using Find Command

Yesterday while I was playing with GDB , I found a way by which we can achieve similar results.

Here you can see , I can invoke system commands from the gdb shell.

Further more you can get a nice shell as well 

Thanks for reading !