Skip to main content
OverflowMyBuffers
  • Home
  • Active Directory1
  • Appian6
  • Cloud4
  • Code Reviews1
  • CRTO Notes4
  • Docker1
  • eWPTx1
  • General2
  • Keycloak1
  • Kubernetes2
  • Linux1
  • Mendix1
  • Mobile1
  • OSAI2
  • OSCP2
  • OSED4
  • OSEP Notes4
  • OSINT1
  • OSMR1
  • OSWA1
  • OSWE Notes6
  • Pentesting AI2
  • Reverse Engineering1
  • SAP12
  • Sliver1
  • Tools1
  • Web5
  • Wifi7
Did you know?

In ADCS ESC1, if a certificate template allows enrollees to specify a Subject Alternative Name (SAN) and grants low-privileged users enrollment rights, an attacker can request a certificate as any domain user, including Domain Admin, by simply setting the SAN field.

← All topics

Linux

1 note

Notes

  • Linux Privilege EscalationCommand-first Linux privesc reference: enumeration, sudo abuse and sudo CVEs, SUID/capabilities, cron and PATH hijacks, writable files, docker/lxd/disk groups, NFS, library hijacks, wildcard injection, and the kernel/userland CVEs that still land in 2026 (PwnKit, DirtyPipe, Looney Tunables, GameOver(lay), sudo chroot).
AboutPrivacy PolicyManage cookie preferences