Privilege Escalation

Ansible Playbook Privilege Escalation

Apache Conf Privilege Escalation

Bash eq Privilege Escalation

Buffer Overflow Privilege Escalation

Chrome Remote Debugger Pentesting

Doas Privilege Escalation

FireFox Credentials Dumping

Ghidra Debug Mode RCE

Gnuplot Privilege Escalation

LXC/LXD (Linux Container/Daemon) Privilege Escalation

Linux Privilege Escalation

OpenSSL Privilege Escalation

Pip Download Code Execution

PolKit Privilege Escalation

Python Eval Code Execution

Python Jails Escape

Python Privilege Escalation

Python Yaml Privilege Escalation

Ruby Privilege Escalation

Rust Privilege Escalation

SSSD Privilege Escalation

Shared Library Hijacking

Snapd Privilege Escalation

Sudo ClamAV Privilege Escalation

Sudo Dstat Privilege Escalation

Sudo Exiftool Privilege Escalation

Sudo Fail2ban Privilege Escalation

Sudo Git Privilege Escalation

Sudo Java Privilege Escalation

Sudo OpenVPN Privilege Escalation

Sudo Path Traversal Privilege Escalation

Sudo Privilege Escalation

Sudo Privilege Escalation by Overriding Shared Library

Sudo Reboot Privilege Escalation

Sudo Screen Privilege Escalation

Sudo Service Privilege Escalation

Sudo Shutdown, Poweroff Privilege Escalation

Sudo Systemctl Privilege Escalation

Sudo Tee Privilege Escalation

Sudo Umount Privilege Escalation

Sudo Vim Privilege Escalation

Sudo Wall Privilege Escalation

Sudo Wget Privilege Escalation

Sudoedit Privilege Escalation

Tar Wildcard Injection PrivEsc

Update-Motd Privilege Escalation

irb (Interactive Ruby Shell) Privilege Escalation

Chrome Remote Debugger Pentesting

Last modified: 2024-12-24

Chrome Remote Debugger is a tool that debugs web applications.

Investigation

/usr/bin/google-chrome --remote-debugging-port=12345

If the target system is running Google Chrome Debugger with specific port, we can port forward and may be able to retrieve sensitive data in browser debugging mode.

Exploitation

1. Port Forwarding

First off, start port forwarding in local machine.

ssh -L 12345:127.0.0.1:12345 remote-user@example.com

2. Configure Network Targets in Chrome

Assume the chrome debugger is running on port 12345.
Open Chrome browser and input the following string in URL bar at the top of the window.

chrome://inspect/#devices

Then click “Configure…” at the right of “Discover network targets”. The modal window opens.
In the modal window, enter “localhost:12345” then click “Done”.
Now we should see the remote host appears at the bottom of the “Remote Target”.
Click “inspect” then new browser open. We can browse the website.

(Option) Find Credentials

If the login page found when inspecting, we may see a credential in the developer tool at the right pane. Go to Network and click the target page such as login.php then go to the Payload tab. We can find credentials.

Privilege Escalation

Post Exploitation

Backup

Container

Archive

Attack

Protocol

Management

Chrome Remote Debugger Pentesting

Investigation

Exploitation

1. Port Forwarding

2. Configure Network Targets in Chrome

(Option) Find Credentials

ON THIS PAGE