Privilege Escalation (General)

Question 1

Kernel Exploits (General Escalation)

Answer 1

• unpatched systems are vulnerable to different exploits

Question 2

Default Account Settings (General Escalation)

Answer 2

• default admin accounts can be exploited, guest accounts should be disbaled

Question 3

Sandbox Escape (General Escalation)

Answer 3

• Shell upgrade - restricted shells are exploited to gain an upgraded shell
• Virtual Machines - escaping VM sandbox leads to exploiting of underlying hardware and puts other VMS at risk
• Container - share a common OS, can compromise every container if system is compromised

Question 4

Physical Service Security (General Escalation)

Answer 4

• Cold boot attack
• JTAG debug
• serial console

Question 5

Cold Boot Attack - Physical (General Escalation)

Answer 5

• side channel attack where attacker has physical access, user is able to retrieve encryption keys from a running OS after using cold reboot to restart machine

Question 6

JTAG Debug - Physical (General Escalation)

Answer 6

• JTAG is standard for verifying designs and testing printed circuit boards, can be used to read registers from motherboard and read arbitrary memory locations

Question 7

Serial Console - Physical (General Escalation)

Answer 7

• can connect to device over serial port with physical access, lower security is enabled on these ports