diff --git a/tools/unix-privesc-check.md b/tools/unix-privesc-check.md new file mode 100644 index 0000000..75c32cf --- /dev/null +++ b/tools/unix-privesc-check.md @@ -0,0 +1,38 @@ +# unix-privesc-check + +Notes +------- + +Help Text +------- +``` +unix-privesc-check v1.4 ( http://pentestmonkey.net/tools/unix-privesc-check ) + +Usage: unix-privesc-check { standard | detailed } + +"standard" mode: Speed-optimised check of lots of security settings. + +"detailed" mode: Same as standard mode, but also checks perms of open file + handles and called files (e.g. parsed from shell scripts, + linked .so files). This mode is slow and prone to false + positives but might help you find more subtle flaws in 3rd + party programs. + +This script checks file permissions and other settings that could allow +local users to escalate privileges. + +Use of this script is only permitted on systems which you have been granted +legal permission to perform a security assessment of. Apart from this +condition the GPL v2 applies. + +Search the output for the word 'WARNING'. If you don't see it then this +script didn't find any problems. + +``` + +Example Usage +------- + +Links +------- +