Contents
How is privilege escalation carried out in Linux?
Common Linux privilege escalation attacks are carried out by enumerating the user accounts on a machine. In order to execute the attack, an attacker needs access to the shell of the system. Once they gain shell access, they’re able to list all users on the machine.
What can be done to prevent privilege escalation?
As privilege escalation works to exploit both human psychology (with social engineering tactics) and security vulnerabilities commonly found in operating systems and applications, following strategic tactics to maintain a good security posture can go far in preventing an organization’s ordeal with privilege escalation.
Why do attackers need to heighten their privileges?
Attackers exploit vulnerabilities, system weaknesses and misconfigurations after they’ve successfully compromised the system through a low-level account, and now need to heighten their privileges to study the system and carry out the cyber attack.
How is privilege escalation used in a cyber attack?
Using the information gathered and analyzed, the attacker can successfully compromise a system, usually by gaining access with a low-level account. In this scenario, and phase of the cyber attack life cycle, attackers look around the network, map it and search for exploitable vulnerabilities.
How can privilege escalation through pkexec be prevented?
The user created during installation of Ubuntu is a member of those groups, as it is the system administrator. If you create a new user that is not member of those groups, it cannot use pkexec. man polkit gives you some information about how to configure policy kit.
Which is an example of Horizontal privilege escalation?
In horizontal privilege escalation, attackers would, once they sent the above-mentioned phishing email and managed to compromise the account, need to elevate permissions with it. Let’s say that the email is sent from “PayPal”: Once attackers gain access to your account, they attempt to gain admin privileges.