From b56a0eb3294f3e693d7ba2a34d6d3d15915e137a Mon Sep 17 00:00:00 2001 From: Will Pennell Date: Sun, 6 Apr 2014 09:16:42 -0400 Subject: [PATCH] Added unix-privesc-check --- tools/unix-privesc-check.md | 38 +++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 tools/unix-privesc-check.md diff --git a/tools/unix-privesc-check.md b/tools/unix-privesc-check.md new file mode 100644 index 0000000..75c32cf --- /dev/null +++ b/tools/unix-privesc-check.md @@ -0,0 +1,38 @@ +# unix-privesc-check + +Notes +------- + +Help Text +------- +``` +unix-privesc-check v1.4 ( http://pentestmonkey.net/tools/unix-privesc-check ) + +Usage: unix-privesc-check { standard | detailed } + +"standard" mode: Speed-optimised check of lots of security settings. + +"detailed" mode: Same as standard mode, but also checks perms of open file + handles and called files (e.g. parsed from shell scripts, + linked .so files). This mode is slow and prone to false + positives but might help you find more subtle flaws in 3rd + party programs. + +This script checks file permissions and other settings that could allow +local users to escalate privileges. + +Use of this script is only permitted on systems which you have been granted +legal permission to perform a security assessment of. Apart from this +condition the GPL v2 applies. + +Search the output for the word 'WARNING'. If you don't see it then this +script didn't find any problems. + +``` + +Example Usage +------- + +Links +------- +