Files & Filesystems

Readable & Writtable Files

Knowing the list of readable and writable files come in handy when this exploit is combined with some of the earlier mentioned actions such as scheduled tasks or installed applications.

Linux

find / -writable -type d 2>/dev/null

Mounted Drives

Usually drives are mounted at boot time, but there can be unmounted drives left connected to the system. These unmounted drives can have valuable data that can prove useful in privilege escalation.

cat /etc/fstab

The following command can be used to list all available disks,

/bin/lsblk