Post-Exploitation on Linux

Data Haversting and Enumaration

Common users

awk -F: '{ if($3 >= 1000) print $1}' passwd >> users

Reading bash_history files

Mapping users directories

ls /home/ > users_home

Reading files

for user in $(cat home_users); do echo $user; cat /home/$user/.bash_history ; echo -e "=====\n" ;done

Using great scripts

LinEnu.sh

wget LinEnum.sh

Upload it to the target and run through terminal

> chmod +x LinEnum.sh
> ./LinEnum.sh -t

Done, now pay attention to the output and see if there is anything interesting

OTHERS SCRIPTS

• LinuxPrivChecker
• Linux Exploit Suggester
• High Coffee