https://www.rchitect.in/tags/lxc/Recent content in Lxc on rchitectHugoenThu, 14 Apr 2022 00:00:00 +0000https://www.rchitect.in/posts/lxd/Thu, 14 Apr 2022 00:00:00 +0000https://www.rchitect.in/posts/lxd/<h1 id="lxd-group-privilege-escalation"> lxd group privilege escalation <a class="heading-link" href="#lxd-group-privilege-escalation"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h1> <h5 id="scanrio-as-per-checking-the-user-privilege--there-is-one-thing-which-can-help-us-escalating-the-privilegeuser-belong-lxd-group"> Scanrio: As per checking the user privilege , there is one thing which can help us escalating the privilege.User belong lxd group <a class="heading-link" href="#scanrio-as-per-checking-the-user-privilege--there-is-one-thing-which-can-help-us-escalating-the-privilegeuser-belong-lxd-group"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h5> <pre tabindex="0"><code>orestis@brainfuck:~$ id uid=1000(orestis) gid=1000(orestis) groups=1000(orestis),4(adm),24(cdrom),30(dip),46(plugdev),110(lxd),121(lpadmin),122(sambashare) </code></pre><p>There are some exploits which shows the lxd privileges can be <a href="https://www.hackingarticles.in/lxd-privilege-escalation/" class="external-link" target="_blank" rel="noopener">escalated</a>.</p> <h6 id="on-kali-machine"> On Kali machine: <a class="heading-link" href="#on-kali-machine"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h6> <p>Download and build the alpine image</p>