Skip to content
/ esther Public

ESTHER's a native enumeration tool for GNU/Linux Privilege Escalation

License

Notifications You must be signed in to change notification settings

0x00pf/esther

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

ESTHER

ESTHER's The Hardway EscalatoR at least until I come out with a better name :)

There are zillions of enumeration scripts out there intended to support privilege escalation on GNU/Linux systems. Most of them are bash or python scripts that heavily rely on parsing the output of standard tools...

But what happens if bash or python are not installed in the target machine?

What if some of the used tools does not exists?

I'm thinking on smartphones, routers, or other devices that usually have heavily trimmed down versions of Linux.

So I come up with the idea of coding a native enumeration tool written in C that can be natively run on any device

Actually, this is just an excuse to learn how all those tools to extract information from a system work

Features

Not much yet:

  • Dumps environment
  • Gets uname -a information
  • Dumps /etc/issue, /etc/issue.net /etc/os-release and /etc/lsb-release
  • Dumps current user information
  • Process /etc/password: Shows users with a shell, superusers and current user
  • Process /etc/group: Shows adm and sudo group users
  • Shows lastlog, last and w output
  • Dumps file system. Marks writable/executable folders
  • Search for standard compilers/interpreters
  • Search for SUID, SGID, World Writable and World Writable + Executable files
  • Dump processes from /proc. Shows process name, owner and command-line

Dependencies

So far no dependency. I hope to keep it like this

Installation

./configure && make && sudo make install

Cross-compilation for ARM or MIPS should be straightforward. Not tested yet

About

ESTHER's a native enumeration tool for GNU/Linux Privilege Escalation

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published