Jul 18, 2024 · You can find a good vulnerable kernel list and some already compiled exploits here: https://github.com/lucyoa/kernel-exploits and exploitdb sploits.

RunC Privilege Escalation · Checklist · Euid, ruid, suid · Interesting Groups

Jul 18, 2024 · Is any software running with more privileges than it should have? Search for exploits of running processes (especially the version running).

Jul 18, 2024 · It looks like by default members of root group could have access to modify some service configuration files or some libraries files or other ...

Jul 18, 2024 · Note that in this example we haven't escalated privileges, but modifying the commands executed and waiting for root or other privileged user to ...

Jul 18, 2024 · The default operation of runc is to run as root, so running it as an unprivileged user simply cannot work (unless you have a rootless configuration).

Jul 18, 2024 · Use-case: This set is particularly useful for restricting a process's privilege escalation potential, adding an extra layer of security.

Sep 4, 2024 · Best tool to look for Windows local privilege escalation vectors: WinPEAS. System Info. Obtain System information. Search for kernel exploits using scripts.

Jul 18, 2024 · Build an Alpine image and start it using the flag security.privileged=true, forcing the container to interact as root with the host filesystem.