Professional Penetration Testing, 2nd Edition

Chapter 9

Local System Attacks

Abstract

This chapter looks at what actions to take once we have internal access to a target system during a professional penetration test. These attacks are often dependent on previous (remote) exploitations that allow us unauthorized access to the system; however, once inside, we may need to elevate our privileges so that we can further compromise the system and possibly the rest of the network.

Keywords

Shell

Backdoor

Encryption

Tunnels

Tunneling

Local attacks

Exploitation

Contents

Introduction

System Exploitation

Internal Vulnerabilities

Sensitive Data

Meterpreter

Shells and Reverse Shells

Netcat Shell

Netcat Reverse Shell

Encrypted Tunnels

Adding a Host Firewall (Optional)

Setting Up the SSH Reverse ...