Comments (2)
Hi again @Techbrunch . Thank you for providing another idea.
In this case I am not convinced that looking for non-default directories is that interesting for a privilege escalation. It might be too generic.
However I think that looking for readable backups is actually very interesting.
I am considering to add a test that runs something like:
find / -path /usr/share -prune -o -readable -regextype egrep -iregex ".*(backup|dump|copy|bkp)[^/]*\.(sql|tgz|tar|tar\.[a-z0-2]{2,5}|zip|gz|xz|bzip2|bz2|lz|7z)" -print 2> /dev/null
This should return files that are readable backups.
What do you think about this?
from linux-smart-enumeration.
I added a check to detect readable backups in version 1.20
from linux-smart-enumeration.
Related Issues (20)
- LSE Color issues HOT 1
- sud000 missing alternate hostname results HOT 2
- [Request] User Friendly Reports HOT 1
- Uncommon setuid binaries HOT 1
- Suggestion: Search for passwords in commonly used log files HOT 1
- Consider dropping white/black colors HOT 3
- Missing "doas" configuration checking HOT 4
- Elevate NFS share checking up to l1 from l2 HOT 2
- too many /snap/core/ HOT 3
- Check ptrace_scope HOT 1
- Check for existing tmux sessions HOT 10
- Kali HOT 1
- Kali- Linux
- Serve option contain invalid netcat flag "-q" HOT 4
- Check for anonymous MongoDB authentication HOT 1
- Common setuid binary `fusermount3` HOT 1
- Disable color not working for process monitor HOT 1
- `lse_procmon` incompatibility with busybox `ps` HOT 2
- Colour issues dependent on system? HOT 4
- Add CVE test for DirtyCred
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from linux-smart-enumeration.