IT 670 Ashford University Linux Privilege Escalation Lab Report This is a virtual lab assignment, that requires my credentials that will be given to once w

IT 670 Ashford University Linux Privilege Escalation Lab Report This is a virtual lab assignment, that requires my credentials that will be given to once we have talked i have attached the assignments. For assignment 8 task 4 only needs to be done. exit
TDA – Assignment 8:
Linux Privesc
Assignment 8 objectives:
•
•
•
•
You must use the command line to complete each task.
Provide a screenshot showing the completion for each objective, along with any command lines used
o Type your name in the command line for display in the same screenshot
Submit your completed tasks in PDF format by the provided due date
Completion requires the following:
o Privilege escalation as determined by the tasks
Assignment 8 Tasks:
A Virtual Machine without credentials has been provided for this assignment:
Linux: A8.ova
Task 1: Use netcat to connect to the bind shell on the Linux host, which is listening on port
4345. This will simulate your initial foothold.
Note: Once the port has been “touched” you will need to reboot the box to reset the bind shell.
It is recommended you generate a meterpreter reverse shell executable payload, set an
accompanying listener in MSF, then copy your payload to the Linux host and run it. This will
provide a more stable environment.
Task 2: Abuse the User’s “sudo” privileges to gain access to a root shell. Screenshot your
attack path and cat the “/root/proof.txt” file along with your name in the final screenshot.
Task 3: Use the Linux Exploit Suggester shell script referenced in this week’s slides on the
Victim VM. Read the output, and use the “Dirty Cow 2” exploit against the system. Escalate to
your newly elevated account and take a screenshot showing the output of the “whoami”
command along with the output of the /root/proof.txt file.
Note: Be sure to read the .c file once it is downloaded! Once you compile and run the exploit it
may take a few minutes for it to finish, be patient.
Task 4: There are multiple other methods of privilege escalation on this host. Exploit two:
crontab: root script || File: cleartext pass || Config: SUID || Config: world writeable file
Note: You are not limited to just these four if you find another path, there is plenty to choose
from. However, you cannot use another sudo direct escalation privilege abuse for Task 4.
exit
TDA – Assignment 9:
Buffer Overflow
Assignment 9 objectives:
•
•
•
•
•
You must successfully create a manual buffer overflow against the SLMail program for full credit
o Document each step of the buffer overflow development process with a screenshot and description
Upon completion provide a proof screenshot with the following commands:
o Whoami, hostname, and your name in the command line
You must also provide the full python script you developed as an appendix in your PDF submission
Submit your completed tasks in PDF format by the provided due date
Completion requires the following:
o Development walkthrough
o Proof screenshot
o Full python script
Assignment 9 Tasks:
A Virtual Machine with the following credentials has been provided for this assignment:
Windows:
User&Pass:
A9.ova
F4thrB0bct:securepassword
Task 1: Manually create a buffer overflow for the SLMail client on port 110 of your windows
client. You have administrative rights to the host. Anytime the service crashes, you will need to
restart the service – You can run the “slmail restart” bat script on the desktop to do so.
You can use the provided fuzzer.py script as a proof of concept for fuzzing the service, and the
BOFramework.py script to begin your development.
Note: You will have to run the slmail restart script and Immunity Debugger as administrator for
it to work properly. You can do this by right clicking the file and selecting “Run as administrator”.
Fuzzer.py:
#!/usr/bin/python
import socket
buffer=[“A”]
counter=100
while len(buffer)
Purchase answer to see full
attachment