linux-cron-service-abuse

What problem does it solve?

This Skill helps you gain higher privileges on a Linux system by exploiting misconfigurations in scheduled tasks, system services, and inter-process communication mechanisms.

Core Features & Use Cases

• Cron Job Exploitation: Leverages writable scripts, PATH manipulation, and wildcard injection in cron jobs.
• Systemd Service Abuse: Modifies or replaces systemd service files and binaries for privilege escalation.
• D-Bus Exploitation: Exploits vulnerable D-Bus services and PolicyKit flaws (like PwnKit).
• Unix Socket Abuse: Leverages writable Unix sockets, including the Docker socket, for elevated access.
• Use Case: A penetration tester finds a cron job running as root that executes a script they can write to. They modify the script to create a SUID binary of bash, allowing them to gain a root shell.

Quick Start

Use the linux-cron-service-abuse skill to enumerate cron jobs and systemd timers on the target system.