module

Multiple Linux / Unix Post Sudo Upgrade Shell

Try Surface Command
Back to search
Disclosed
N/A
Created
May 30, 2018

Description

This module attempts to upgrade a shell account to UID 0 by reusing the
given password and passing it to sudo. This technique relies on sudo
versions from 2008 and later which support -A.

Authors

todb [email protected]
Ryan Baxendale [email protected]

Platform

AIX,Linux,OSX,Solaris,Unix

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use post/multi/manage/sudo
    msf post(sudo) > show actions
        ...actions...
    msf post(sudo) > set ACTION < action-name >
    msf post(sudo) > show options
        ...show and set options...
    msf post(sudo) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today